Automated banking machine system and monitoring method

ABSTRACT

A cash dispensing automated banking machine actuated by user cards is in operative connection with a system usable to capture images related to activity that is conducted at or adjacent to the machine. The automated banking machine is positioned at a banking facility including a vault and an entrance. A plurality of cameras are positioned at the facility. Images captured may be analyzed at the bank facility or the remote monitoring center. The monitoring center may operate to assure that employees of the bank facility or others can safely access and/or leave the bank facility.

CROSS REFERENCE TO RELATED APPLICATIONS

This application claims benefit pursuant to 35 U.S.C. §119(e) ofprovisional application Ser. Nos. 60/819,699; 60/819,698; and60/819,696, each of which was filed Jul. 7, 2006 and the disclosures ofeach of which are incorporated herein by reference.

TECHNICAL FIELD

This invention relates to transaction systems. Specifically exemplaryembodiments relate to a system for an automated banking machine that isactuated by user cards and which provides image records as well as datarecords related to transactions and other activities. Exemplaryembodiments further relate to a system which captures images and enablesimages and data to be stored, remotely accessed and selectivelyprocessed and analyzed. Exemplary embodiments further relate to systemsthat monitor facilities and individuals.

BACKGROUND ART

Automated banking machines are known in the prior art. A common type ofcard actuated automated banking machine used by consumers is anautomated teller machine (“ATM”). ATMs enable customers to carry outbanking transactions such as dispensing cash, making deposits, makingtransfers of funds, depositing checks and other instruments, cashingchecks or other documents, payment of bills and account balanceinquiries. Other types of automated banking machines are used forpurposes of dispensing tickets, scrip, travelers checks, airlinetickets, gaming materials and other items of value. Other types ofautomated banking machines are used by service providers such ascashiers or bank tellers for purposes of dispensing or receivingcurrency, counting currency and determining the genuineness of currency.For purposes of this disclosure an automated banking machine will beconsidered as being any machine which accomplishes the handling ortransfer of items having or representative of value.

Automated banking machines sometimes have camera systems associated withthem. Such systems may benefit from improvements.

Surveillance systems are also sometimes used in banking environments aswell as other environments. Such systems may benefit from improvements.

DISCLOSURE OF INVENTION

It is an object of an exemplary embodiment to provide a transactionrecord system for an automated banking machine.

It is a further object of an exemplary embodiment to provide a systemfor recording image data related to transactions conducted at anautomated banking machine.

It is a further object of an exemplary embodiment to provide a systemfor recording image and transaction data related to transactionsconducted at an automated banking machine.

It is a further object of an exemplary embodiment to provide a systemfor enabling access to image and transaction data related totransactions conducted at an automated banking machine remotely througha network.

It is a further object of an exemplary embodiment to provide a systemfor accessing image and transaction data in response to events thatoccur at an automated banking machine.

It is a further object of an exemplary embodiment to provide a systemfor obtaining image data and for taking actions in an appropriateprogrammed sequence in response to events at an automated bankingmachine.

It is a further object of an exemplary embodiment to provide a systemfor obtaining image data and for taking actions in a sequence which canbe programmed more readily.

It is a further object of an exemplary embodiment to provide a systemwhich achieves greater assurance of capturing useful image andtransaction data related to transactions conducted at an automatedbanking machine.

It is a further object of an exemplary embodiment to provide a systemthat provides selective remote notification of events and conditionsoccurring at an automated banking machine.

It is a further object of an exemplary embodiment to provide a systemthat simplifies the recording, storage and analysis of transaction andimage data generated at an automated banking machine.

It is a further object of an exemplary embodiment to provide a systemfor imaging documents at an automated banking machine.

It is a further object of an exemplary embodiment to provide a systemthat enables analysis of documents presented at an automated bankingmachine.

It is a further object of an exemplary embodiment to provide a systemfor obtaining and storing image data related to servicing activitiesconducted at an automated banking machine.

It is a further object of an exemplary embodiment to provide methods ofrecording, storing and analyzing image and transaction data produced inthe operation of an automated banking machine.

It is a further object of an exemplary embodiment to provide an imagecapture system that captures images in response to triggering events andwhich captures images in accordance with a programmed sequence ofactions.

It is a further object of an exemplary embodiment to provide an imagecapture system in which the triggering event is the occurrence of animage condition within a field of view of a camera.

It is a further object of an exemplary embodiment to provide an imagecapture system in which images are captured in response to a triggeringevent which includes changes within a selected detection area within afield of view of a camera.

It is a further object of an exemplary embodiment to provide an imagecapture system which captures images in response to a triggering eventwhich includes the presence of a particular characteristic, object,facial feature or color within an image.

It is a further object of an exemplary embodiment to provide an imagecapture system that can provide remote notification of a triggeringevent and to include with the notification an image associated with theevent.

It is a further object of an exemplary embodiment to provide an imagecapture system which provides for selective deletion of images by thetype of event with which the image is associated.

It is a further object of an exemplary embodiment to provide an imagecapture system in which images may be sorted and searched by parametersor combinations of parameters.

It is a further object of an exemplary embodiment to provide anautomated banking machine that issues documents including indiciacorresponding to an image of at least a portion of a user operating themachine.

It is a further object of an exemplary embodiment to provide an imagecapture system which provides for transferring images in a manner whichprovides enhanced assurance that the transferred images have not beenaltered.

It is a further object of an exemplary embodiment to provide anautomated banking machine that provides documents including indiciacorresponding to an image of at least a portion of a user operating themachine.

It is a further object of exemplary embodiments to provide systems andmethods for monitoring facilities and individuals.

Further objects of exemplary embodiments will be made apparent in thefollowing Best Modes for Carrying Out Invention and the appended claims.

The foregoing objects are accomplished in one exemplary embodiment by asystem which includes an automated banking machine. The automatedbanking machine carries out transactions by performing severaltransaction functions. At least one camera is positioned adjacent to theautomated banking machine. The camera operates to produce camera signalswhich represent images within a field of view of the camera.

The exemplary system further includes a computer in operative connectionwith a data store. The computer includes a server operating inconnection with the computer. In some embodiments of the system theserver may be resident and a part of the computer within the automatedbanking machine. In other embodiments the server may reside in alocation adjacent to or disposed from the automated banking machine. Thecomputer is in operative connection with the machine and the camera. Thecomputer operates in accordance with programmed instructions to includeimage data corresponding to the camera signals in the data store. Theimage data is stored in response to the machine carrying out transactionfunctions.

The server is in connection with an electronic communications network.In some embodiments this may be a direct connection, local area networkor an intranet. In other embodiments the network may be atelecommunications network, wide area network or the Internet.Alternatively the network could include a wireless network such as an RFnetwork or satellite network. A user terminal disposed from theautomated banking machine is connected to the network. The user terminalmay be connected directly to the network or may be connected through oneor more intervening networks and servers. The user terminal includes acomputer with a browser operating therein as well as an output devicesuch as a screen or printer. The user terminal through the browseraccesses the image data through the server. The user terminal operatesto output the image data through its output device. The user terminalalso is used to access transaction data related to transactionscorresponding to image data stored in the data store associated with theserver. The user terminal may be operated to more rapidly analyze andsort image and transaction data, as well as to conduct a more detailedanalysis of image or transaction data.

Embodiments of the system may also operate in accordance with sequencesof instructions. The sequence instructions provide for a sequence ofactions to be taken in response to certain conditions. For example if inthe course of capturing image data, a camera adjacent to the ATM isunable to produce usable video, such as because it is covered or due toglare, the instructions in the sequence may cause the system to begincapturing image data from another nearby camera. Other sequenceinstructions may avoid recording the image data for selectedtransactions. Other sequence instructions may cause the recording ofimages associated with service activities. This may be done with cameraslocated in service areas such as behind an automated teller machine orwithin the automated teller machine itself. Selective motion detectionand other hard and soft triggers may be used to initiate recording ofimages and/or other actions which are part of a sequence.

Alternative embodiments may also provide messages through the networkindicative of conditions or events occurring at the automated bankingmachine. Further embodiments of the system operate to manage availablememory. This may include projecting when available memory will likely bedepleted and sending a message which indicates such condition. Otherembodiments may reconfigure available memory or may automatically deleteselectively certain image data or off-load data in memory through thenetwork to a remote storage location. Further alternative embodimentsmay provide for imaging of documents deposited in the machine. Image andtransaction data associated with the deposit of documents may berecovered. Analysis of document image data such as signature analysismay be conducted through the network remotely from document verificationterminals which include data usable to verify the genuineness ofdeposited documents.

Alternative exemplary embodiments may be used independent of anautomated transaction machine to capture image data selectively inresponse to triggering events. Such triggering events operate to causethe system to execute sequences which may include the capture ofadditional images or to take other actions including the remotenotification of persons electronically of the occurrence of triggeringevents. Such notifications may include or have attached thereto at leastone image file corresponding to an image associated with the event forwhich notification is being given.

In certain exemplary embodiments the triggering events include certainimage conditions. Image conditions may correspond to the blocking of acamera in a way that prevents the delivery of usable video.Alternatively image conditions may correspond to the detection ofmotion, colors, objects, facial features, clothing, body positions, orother characteristics or items within a field of view of a camera.Exemplary embodiments may enable a user to select one or more subsets ofthe field of view as a detection area and to sense for motion or otherimage conditions only within the detection area while ignoring imageconditions outside the detection area. This facilitates the detection ofdesired events and avoids the use of available image storage in responseto capturing images which are not of interest.

Exemplary embodiments may also store image data and other dataassociated therewith so as to provide enhanced searchability of images.Some embodiments may enable searching through images selectively by oneor more parameters. Such parameters may include the type of triggeringevent causing the image to be captured. Other exemplary parameters mayinclude transaction types with which an image is associated, or timeperiods during which images are captured. Other parameters for thesearching of images may include searching by color, object type, facialfeatures or other characteristics. Such capabilities enable images to beidentified, recalled and analyzed selectively, more quickly or ingreater detail than is possible with existing systems.

Exemplary embodiments may also enable the transfer of images that havebeen captured in a manner that provides greater assurance that theimages have not been subject to alteration. Such capability assures thatthe image has greater evidentiary value in the event that it is used toestablish liability related to the occurrence of transactions or events.

Exemplary embodiments may also provide for the providing of documents inor from an automated banking machine that include indicia correspondingto an image of a user of the machine. This may facilitate verifying theauthority of the person presenting the document at another location forpurposes of obtaining value, goods or services. Exemplary embodimentsmay also operate to compare image data corresponding to an image of atleast a portion of a user to data corresponding to a plurality of usersstored in a data store. The user may be allowed to receive documentsfrom the machine, only if the data in the data store corresponds toimage data associated with the user. Alternatively or in addition, themachine may operate to prevent providing at least one document to a userif the data corresponding to the image of the user corresponds to datafor an individual stored in the data store.

Other exemplary embodiments may also provide for assuring the securityof facilities such as banking facilities as well as users. Someembodiments, may enable remote visual inspection of a banking facility,for example, prior to a user's arrival. The user may be informed ofabnormal conditions which suggest that the user should not enter thefacility. In some embodiments a system may operate to track themovements of an authorized user and observe the user entering and movingwithin the facility. This may help to assure that the user is notsubject to attack or robbery upon approaching the facility. In stillother embodiments exemplary systems may operate to monitor theactivities of a user leaving a facility to assure that they are able toexit the facility safely. In still other exemplary embodiments systemsmay be operated to monitor a user's movements toward a destination,assure that a destination facility is safe and monitor the user'sapproach and entry into the destination. Still other embodiments mayoperate to determine that the user's movements are not consistent withtraveling to the destination. This enables the system to assure that theuser has not been subject to robbery or some other event which presentsa problem.

Other exemplary embodiments will become apparent from the followingdisclosure.

BRIEF DESCRIPTION OF DRAWINGS

FIG. 1 is a schematic view of an exemplary embodiment of a transactionrecord system used in connection with an automated banking machine.

FIG. 2 is a schematic view of a control system for devices within anautomated banking machine which incorporates a first embodiment of atransaction record system.

FIGS. 3 and 4 are schematic views of the relationship between thelogical components which make up exemplary embodiments of thetransaction record system.

FIG. 5 is a schematic view of the operation of the logical components ofan exemplary embodiment operating to detect motion in the field of viewof a camera used in connection with an embodiment.

FIG. 6 is a schematic view of the operation of logical components of anexemplary embodiment responding to a hard trigger type input.

FIG. 7 is a schematic view of the logical components of an exemplaryembodiment responding to a soft trigger input.

FIG. 8 is a schematic view of the operation of the logical components ofan exemplary embodiment responding to loss of usable video from acamera.

FIG. 9 is a schematic view of the logical components of an exemplaryembodiment operating in connection with a user identification systemwhich identifies a user based on visible properties associated with theuser.

FIG. 10 is a schematic view of an alternative embodiment of atransaction record system in which an image server resides with otherservers which operate the automated banking machine.

FIG. 11 is a schematic view of a further alternative embodiment of atransaction record system in which the image acquisition devices areseparate nodes on a network.

FIG. 12 is a schematic view of a further alternative embodiment of thetransaction record system in which the image acquisition devices residein a second network.

FIG. 13 is a schematic view of a further alternative embodiment whichincludes an automated banking machine with a document imaging device.

FIGS. 14 and 15 are a schematic view of logic flow associated withmemory allocation and control used by an exemplary embodiment to providegreater reliability in storing image and transaction data.

FIG. 16 is a screen presented in an exemplary embodiment at a userterminal describing functions performed by an exemplary system of theinvention and categories of persons generally authorized to perform suchfunctions.

FIG. 17 is an exemplary embodiment of a screen presented at a userterminal for purposes of viewing and analyzing image data.

FIG. 18 is a screen presented at a user terminal in an exemplaryembodiment for purposes of explaining the functions of icons shown inFIG. 17.

FIG. 19 is a view of an exemplary screen similar to FIG. 17 but with aselected image enlarged for purposes of analysis.

FIG. 20 is a view of an exemplary programming screen used in anexemplary embodiment.

FIG. 21 is an exemplary embodiment of a daily program screen presentedat a user terminal.

FIG. 22 is an exemplary embodiment of a setup screen displayed at a userterminal.

FIG. 23 is an exemplary embodiment of a setup screen presented at a userterminal for purposes of setting image compression types and forprogramming sequences.

FIG. 24 is an exemplary embodiment of a screen presented at a userterminal for purposes of establishing user access capabilities.

FIG. 25 is an exemplary screen presented at a user terminal for purposesof establishing image and data capture parameters during the carryingout of transaction functions at an automated banking machine.

FIG. 26 is an exemplary embodiment of a screen presented at a userterminal for purposes of input and editing e-mail addresses used forsending messages related to conditions and events occurring at anautomated banking machine.

FIG. 27 is an exemplary embodiment of a screen presented at a userterminal for purposes of setting up an e-mail group including e-mailaddresses of persons to be notified in response to the occurrence ofconditions and events at an automated banking machine.

FIG. 28 is a schematic view of an alternative embodiment of an imagecapture system.

FIG. 29 is an exemplary screen presented at a user terminal for purposesof operating and controlling the capture and presentation of capturedimages in the system of FIG. 28.

FIG. 30 is a detailed view of the tool bar and icons presented in thescreen shown in

FIG. 29.

FIGS. 31 and 32 are a chart showing the icons presented in the tool barshown in FIG. 30 and the functions and operations in the programming ofthe exemplary system associated with each.

FIG. 33 is an exemplary screen presented to a user in operation of theexemplary system shown in FIG. 28 for purposes of configuring theselective deletion of image data.

FIG. 34 is an exemplary screen presented at a user terminal in thesystem of FIG. 28 for purposes of setting up an automatic deletefunction for selectively deleting types of captured images.

FIG. 35 is an exemplary screen presented at a user terminal forconfiguring and programming the exemplary system to apply enhancedsecurity to captured images.

FIG. 36 is an exemplary screen presented at a user terminal for purposesof applying descriptive names to cameras, which descriptive names may beused in programming sequences.

FIG. 37 is an exemplary screen presented at a user terminal whichenables a user to assign descriptive names to outputs which may beprovided by the system as part of sequences.

FIG. 38 is an exemplary screen presented at a user terminal whichenables a user to assign descriptive names to inputs which the imagecapture system may receive.

FIG. 39 is an exemplary embodiment of a screen presented at a userterminal for purposes of capturing images in response to triggeringevents which occur in the operation of an automated banking machine.

FIG. 40 is an exemplary screen presented at a user terminal for purposesof establishing e-mail addresses and groups of e-mail addresses whichare to receive e-mail messages in response to the occurrence of certaintriggering events in the system.

FIG. 41 is an exemplary embodiment of a screen presented at a userterminal for purposes of setting up a group of e-mail addresses forpersons who are to be notified of certain events occurring at thesystem.

FIG. 42 is an exemplary embodiment of a screen presented at the userterminal for purposes of programming the system with sequences.

FIG. 43 is an exemplary screen presented at a user terminal whichgraphically displays sequences applicable to particular times and datesthat have been programmed into the system.

FIG. 44 is an exemplary screen presented at a user terminal showing thetimes each day certain routine program sequences are carried out.

FIG. 45 is an exemplary embodiment of a screen presented at a userterminal representative of the steps taken by a user in programming asequence.

FIG. 46 is an exemplary embodiment of a screen presented at the userterminal for purposes of establishing a programmed sequence in responseto inputs received by the system.

FIG. 47 is an exemplary screen presented at a user terminal for purposesof displaying the times during which the sequence applicable to aparticular input will cause a system to operate.

FIG. 48 is an exemplary screen presented at a user terminal associatedwith programming a sequence in response to receipt of a particular inputby the system.

FIG. 49 is an exemplary screen presented at a user terminal for purposesof configuring a sequence for capturing images in response to detectionof motion.

FIG. 50 is an exemplary screen presented at a user terminal for purposesof establishing a detection area as a subset of a field of view of acamera for purposes of selectively detecting motion within the detectionarea.

FIG. 51 is an exemplary screen presented at a user terminal for purposesof showing when a sequence applicable to detection of motion will beoperative within the system.

FIG. 52 is an exemplary screen presented at a user terminal for purposesof programming a sequence to be carried out in response to detection ofa motion event.

FIG. 53 is an exemplary screen presented at a user terminal associatedwith programming a sequence for detecting lack of usable video from acamera in which a camera is selected.

FIG. 54 is a screen similar to that in FIG. 53 showing how the screenafter a camera is selected in response to presentation the screen shownin FIG. 53.

FIG. 55 is an exemplary screen presented at a user terminal for enablinga user to select a degree of change in an image for purposes ofdetecting motion in an image.

FIG. 56 is an exemplary screen presented at a user terminal indicativeof when a particular motion detection sequence will be executed by thesystem.

FIG. 57 is an exemplary screen presented at a user terminal for purposesof programming a sequence to be executed in response to a lack of usablevideo condition.

FIG. 58 is an exemplary screen presented at a user terminal for purposesof establishing a sequence for capturing images at an automated bankingmachine.

FIG. 59 is an exemplary screen for establishing a sequence for capturingimages in connection with a particular type of transaction and enablinga user to selectively input times at which images will be captured aswell as the rate of image capture.

FIG. 60 is an exemplary embodiment of a screen presented at the userterminal for purposes of programming a sequence and demonstrating thecapability of a user to establish the image capture rates as well as theimage quality associated with storage of captured images.

FIG. 61 is an exemplary embodiment of a screen presented at a userterminal for purposes of a user selecting the recovery of images byvarious parameters.

FIG. 62 is an exemplary screen presented at a user terminal showingicons presented as a control panel and images recovered in response to asearch.

FIG. 63 is a view of the screen similar to FIG. 62 but includingrepresentations of images captured as continuous video in AVI form.

FIG. 64 is an exemplary embodiment of a screen presented at a userterminal in response to a search in which the search results show that aplurality of images have been captured in response to a triggeringevent.

FIG. 65 is a view of a screen similar to FIG. 64 includingrepresentations that images have been captured as continuous video inresponse to certain triggering events.

FIG. 66 is an exemplary embodiment of a screen presented at the userterminal showing a plurality of images captured in response to a singletriggering event.

FIG. 67 is an exemplary embodiment of a screen presented at a userterminal showing an image output in which images are not grouped byparticular event type.

FIG. 68 is an exemplary screen similar to FIG. 67 in which the presentedindicia indicates that the image has been grouped with a particularevent.

FIG. 69 is an exemplary embodiment of a screen presented at a userterminal in response to search results obtained in response to a quickviewer routine in which a user is enabled to navigate through images byselecting buttons on the control panel.

FIG. 70 is an exemplary embodiment of a screen presented at the userterminal of a quick viewer page showing a single image with the selectedimage in enlarged format.

FIG. 71 is an exemplary embodiment of a screen presented on a userterminal in which a user is enabled to view images.

FIG. 72 is an exemplary embodiment of a screen presented at a userterminal which displays images selected for purposes of preview forprinting or transfer in an “image cart” which enables such images to bedownloaded.

FIGS. 73 and 74 are a chart indicating the features associated with thedifferent search results shown in FIGS. 62 through 72 and the featuresand capabilities of the images associated therewith.

FIG. 75 includes a chart of indicia and information displayed withimages which can be searched in the exemplary embodiment.

FIG. 76 is an exemplary embodiment of the control panel displayed onscreens of a user terminal in connection with the presentation of searchresults.

FIG. 77 is an exemplary embodiment of an image counter presented inconnection with the control panel shown in FIG. 76.

FIGS. 78 through 80 are charts showing the various functions performedby selection of icons in the exemplary control panel when particularimage pages are being displayed.

FIGS. 81 through 83 are schematic views showing the operation of theicons included in the exemplary control panel screen in navigatingthrough images which are presented to a user at a user terminal.

FIG. 84 is a chart explaining variations in an icon used in connectionwith designating images for deposit into an image cart for purposes ofdownloading images as a group, and the functions associated with theicon.

FIG. 85 is an exemplary embodiment of a screen presented at a userterminal for purposes of providing the user with greater image integrityassurance for downloaded images and a unique key or password forpurposes of enabling the unlocking of such images.

FIG. 86 is a schematic view showing a system used for monitoringfacilities and authorized users.

FIGS. 87 through 89 are a schematic exemplary logic flow diagramrepresentative of logic carried out by at least one processor ofexemplary systems shown in FIG. 86.

FIGS. 90 through 93 are a schematic view of logic steps carried out byan alternative embodiment of a system for monitoring facilities and/orusers.

BEST MODES FOR CARRYING OUT INVENTION

Referring now to the drawings and particularly to FIG. 1 there is showntherein an exemplary embodiment which operates as a transaction recordsystem for an automated banking machine generally indicated 10. Thesystem of this embodiment includes an automated banking machine 12 whichin this example is an ATM. It should be understood that in otherembodiments other types of automated banking machines may be used. ATM12 includes a number of transaction function devices. These transactionfunction devices are associated with components of the machine such as acard reader 14 and a keypad 16. The card reader and keypad serve asinput devices through which users can input instructions andinformation. It should be understood that as referred to herein thekeypad includes function keys or touch screen inputs which may be usedin other embodiments to input data into the machine.

ATM 12 further includes additional transaction function devices. Suchtransaction function devices may include a presenter schematicallyindicated 18 which operates to present cash or other documents of valueto a customer. The presenter 18 in the embodiment shown is associatedwith a dispenser schematically indicated 20 (see FIG. 2). The dispenseris operative to obtain sheets such as currency bills from within themachine and to deliver them to the presenter in the describedembodiment. In alternative embodiments only a presenter or a dispensermay be used. The exemplary ATM 12 further includes a depository 22. Thedepository 22 accepts deposits from customers. In the embodiment shownthe depository is generally configured to accept cash and otherinstruments such as checks from a customer. It should be understood thatin other embodiments other types of depositories which accept varioustypes of items representative of value may be used. Exemplary ATMs andtransaction function devices are shown in U.S. Pat. Nos. 7,044,366;7,044,367; and 7,028,888 the disclosures of each of which areincorporated herein by reference. Exemplary ATMs may operate to carryout transactions in a manner described in U.S. Pat. No. 7,062,464 thedisclosure of which is incorporated herein by reference.

The transaction record system of the described embodiment furtherincludes a first camera 24. Camera 24 is positioned within or behind thefascia of the ATM or otherwise adjacent the ATM so as to have a field ofview which generally includes the face of the user operating the ATM. Afurther camera 26 is positioned adjacent to the ATM and includes a fieldof view which includes a profile or other view of the user operating theATM. It should be understood that while in this exemplary embodimentcameras are used for acquiring image data corresponding to a portion ofa user, other embodiments may include other types of devices, such asbiometric scanners for example, that can acquire data which correspondsto an image of a portion of a user.

A further camera 28 in this exemplary system is shown positionedadjacent to the ATM with a field of view to observe a service area ofthe ATM. Camera 28 in the exemplary embodiment shown is directed toobserve the back of the ATM and is usable for observing or detectingservice activities. Camera 28 may be for example positioned within avestibule or room which is accessed by service personnel for purposes ofservicing the ATM. A further camera 30 shown schematically, ispositioned adjacent the ATM and within the interior of the cabinet ofthe ATM. Camera 30 is shown having a field of view which is directedgenerally opposite to that of camera 28 and enables it to view areaswhich would normally include the face and hands of servicing personnel.Camera 30 preferably operates when a service door 32 is open and aservicer is accessing the interior of the machine. This enablescapturing image data related to persons servicing or accessing theinterior of the machine.

In the embodiment shown each of the cameras 24, 26, 28, 30 providescamera signals which are analog signals representative of what isobserved within the field of view of the respective camera. It should beunderstood that the camera configuration shown in FIG. 1 is exemplaryand other configurations of cameras, or greater or lesser numbers ofcameras, or other types of devices for capturing image data, may be usedin connection with other embodiments. It should further be understoodthat embodiments may include digital cameras, iris scanners, fingerprintscanners or other types of devices from which data corresponding toimages may be acquired and/or reproduced.

FIG. 2 shows a schematic view of a first hardware configuration of atransaction record system. The automated banking machine 12 includes thetransaction function devices 14, 16, 18, 20, 22 which communicatethrough and are operated responsive to signals passed through deviceinterfaces 34. The device interfaces communicate with the transactionfunction devices on an interface bus 36. The messages which controloperation of the various transaction function devices are communicatedthrough the interface bus. At least one computer which is referred to asa terminal controller 38 operates the ATM by sending messages to thedevice interfaces to control the transaction function devices.

In the embodiment shown in FIG. 2 an image recorder device 40 is shownconnected to the interface bus 36. Image recorder device 40 in theembodiment shown is a separate hardware component from the automatedbanking machine. Image recorder device 40 includes a computer whichincludes a server operating therein, and further includes at least onedata store schematically indicated 42. The data store holds programmedinstructions. The data store also holds data representative of imagedata, transaction data and other data as later described. It should beunderstood that although a data store within the image recorder deviceis described in the exemplary embodiment, reference to a data storeherein encompasses either a single data store or a plurality ofconnected data stores from which data may be recovered.

Image recorder 40 receives the analog signals from the connected cameras24, 26, 28 and 30 as shown. It should be understood that embodiments mayinclude devices which in addition to image data, acquire sound data,infrared signal data and other types of data which can be sensed bysensing devices, stored, recovered and analyzed by the system. Imagerecorder device 40 further includes inputs which are schematicallyrepresented as hard and soft triggers. Hard triggers, examples of whichare hereinafter described, are signals from “hard devices” such assensors. Such devices can generally sense actions or conditions directlysuch as that a service door on the ATM or to a service area has beenopened. The image recorder device also receives soft triggers which mayinclude signals representative of conditions or instructions which arebeing sent as signals to other devices. Such soft triggers may furtherinclude the signals on the interface bus 36 in the embodiment shown ortiming signals or other signals usable to operate the image recorderresponsive to programmed instructions, time parameters or otherconditions or signals.

Soft triggers may also include timing functions. In some embodiments theimage recorder may monitor other types of transaction messages and mayoperate in response thereto. Such alternatives may include for example,systems where the image recorder device 40 is not connected to the buswith the transaction function devices, but instead monitors transactionmessages being sent between an automated banking machine or other deviceand a remote computer, and extracts information concerning the operationof transaction function devices from such messages. Other configurationsand operational capabilities of the image recorder device will beapparent to those skilled in the art from the description herein.

Image recorder 40 in the exemplary embodiment is in communication withan electronic communications network schematically indicated 44. Network44 in the described embodiment may be a local area network such as anintranet or may be a wide area network such as the Internet. In theembodiment shown network 44 is a network that communicates messages inprotocols such as TCP/IP. The network is used to further communicateHTTP messages including records such as HTML, XML and other markuplanguage documents. Of course in other embodiments other communicationsmethods may be used.

The image recorder device 40 includes a computer operating at least oneserver. The server is connected to the network and has at least oneuniform resource locator (URL) or other system address. This enables theserver to be accessed by other terminals connected to the network aswell as to selectively deliver messages to connected terminals. Itshould be understood that network 44 may be connected throughintermediate servers to other networks. This enables the image recorderdevice 40 to communicate with other types of remote terminals includingterminals connected to wireless interfaces such as pagers and cellularphones. If network 44 is an intranet, intermediate servers which operateas a firewall may be included in the system. Access to the Internetenables the communication of messages to terminals located anywhere inthe world. Such communications capability may be valuable in embodimentsof the invention for purposes of image and transaction data recovery andanalysis, and for purposes of sending messages to individuals to benotified of conditions which exist at the automated banking machine.

A plurality of terminals 46 are shown connected to the network 44.Terminals 46 may include a user terminal for purposes of programmingparameters into the data store 42 of image recorder device 40.Alternatively terminals 46 may include user terminals which may be usedto analyze and recover image data and transaction data from the imagerecorder device. Alternative terminals 46 may include data stores forstoring image and transaction data which is downloaded from the imagerecorder device for purposes of storage as later described herein.Alternative terminals 46 may include document verification terminals forverifying the authenticity of documents, identifying user data or forcarrying out other functions described herein. Typically terminals 46include computers including a browser component schematically indicated48. The browser communicates with the server in the image recorderdevice to access the image data. Such a browser component may becommercial browsers such as Netscape Navigator™, Microsoft InternetExplorer™, Mozilla™ or other types of browsers. Terminals 46 alsoinclude other software and hardware components schematically indicated50 suitable for processing image data, transaction data and other datathat may be obtained by accessing the server in the image recorderdevice 40.

An exemplary terminal indicated 52 is shown in greater detail in FIG. 2.Exemplary terminal 52 may be a user terminal, document verificationterminal, data storage terminal, data analysis terminal or other type ofterminal for inputting instructions or analyzing data available in thesystem. Terminal 52 in the exemplary embodiment includes a computerschematically indicated 54 which includes an associated data storeschematically indicated 56. As with other data stores described herein,data store 56 may be a single data store or a number of operativelyconnected data stores. Terminal 52 further includes in operativeconnection with the computer 54, input devices 58 and 60 which include akeyboard and mouse respectively in the embodiment shown. Of course inother embodiments other types of input devices may be used. Terminal 52further includes output devices. The output devices in the embodimentshown include a monitor with a display 62 and a printer device 64. Ofcourse in other types of terminals other types of output devices may beused. The terminal 52 includes a computer with a browser component aspreviously described. The browser in the terminal communicates with theserver in the image recorder device 40 through the network 44 forpurposes of carrying out the functions later described in detail herein.Terminal 52 may also have a server operating therein as well as othersoftware components.

The operation of exemplary embodiments are further described with regardto the interaction of logical components of the system described inconnection with FIGS. 3 through 9. It should be understood that thelogical components are generally combinations of software and hardwareused in carrying out the described functions. As shown in FIG. 3 theinput signals from the cameras, microphones or other input devices areinput to the device switching controller component 66. The deviceswitching controller component in exemplary embodiments may includeseveral components. The switching controller delivers signals, which inthe described exemplary embodiment are analog signals, selectively inresponse to a record acquisition control component 68. The recordacquisition 68 component receives hard and soft trigger signalsincluding signals which control or otherwise indicate the operation ofthe transaction function devices in the automated banking machine orother signals which are used as an indicator to initiate a sequence ofactions. The record acquisition component executes the instructionswhich indicate which image signals are desirable to process and recordin response to the trigger signals. The record acquisition componentfurther includes or works in connection with stored instructions, whichare operative to detect conditions such as loss of usable video from acamera or other input device, and to begin acquisition of data fromother devices in response thereto.

The exemplary record acquisition component also operates in connectionwith stored programmed instructions to sense motion in the field of viewof selected cameras or other input devices. As later described suchinstructions may include limiting the area of analysis to one or moreselected detection areas within a field of view, and disregarding otherareas. The record acquisition component may further process and pass offother data such as transaction data related to the operation of anautomated banking machine for storage in correlated relation with imagedata. In some embodiments transaction and other numerical type data isselectively captured and stored in file records that are maintainedseparately from image data. Such transaction data may be correlated withimage data at the time (which also indicates a date or other period oftime) associated with the activity which is recorded for both image andtransaction data. However, in other embodiments of the invention othermethods for such correlation may be used.

In this exemplary embodiment the record acquisition component inaccordance with programmed instructions further controls encryptiontechniques used in connection with image data, as well as datacompression techniques which are used for storing images. The recordacquisition component may further operate to store data and controlother activities such as the sending of e-mail or other messages inresponse to the occurrence of certain conditions.

The record acquisition component 68 in this embodiment operates to sendone or more camera signals to a frame grabber component 70. The framegrabber component is operative to generate digital image datacorresponding to the analog camera signals which are passed to the framegrabber by the record acquisition component. Of course in embodimentswhere digital cameras are used the image data does not need to bedigitized by a separate component. The image data from the frame grabberin this exemplary embodiment is passed to an encryption/authenticatecomponent 72 which may be operated to include authenticating informationwithin the image data. Such authentication data may include digitalsignatures, digital watermarks or other data which can be used to verifythat an image has not been tampered with since it was acquired. Inaddition component 72 may operate to encrypt image data so as tominimize the risk of such data being accessed by unauthorized persons.In alternative embodiments such an encryption component may not be used.

A data compression component 74 may operate to compress the image datato minimize the amount of storage required for holding it. Such datacompression may be performed through a number of different standard ornonstandard schemes. The degree of data compression may be selectivelycontrolled. In this exemplary embodiment, the degree of data compressionis programmable and may be changed through real time inputs or may beprogrammably controlled to change the degree of data compression. Forexample instructions stored in connection with the record acquisitioncomponent 68 may dictate that in response to certain events which aredetected through hard or soft triggers, high quality image acquisitionis required. In such cases data compression may not be used or a lesserdegree of data compression may be used, to increase the quality of theimages. Of course in such circumstances the record acquisition componentmay also increase the frequency at which images are captured fromvarious input devices. In some instances, the image capture frequencymay be increased to the extent that clips of generally visuallycontinuous images are captured and stored.

After the image data is compressed in the exemplary system, it istransferred to a RAM cache store component 76. The RAM cache storestores the image and transaction data (and other system data that therecord acquisition component may dictate be stored for a period oftime). It should be understood that embodiments may operate to analyzecache store data for purposes of detecting and analyzing image andtransaction data and for taking action in response thereto in accordancewith programmed instructions. In some embodiments the record acquisitioncontrol component 68 operates to place images in storage from allcameras on a regular or nonregular periodic basis. These recordsinitially do not correspond to any triggering event. However, someembodiments may operate in response to programmed instructions when atriggering event occurs to associate one or more images immediatelypreceding the triggering event to be associated with the images capturedin response to the triggering event. This enables embodiments of thesystem to capture and retain those images of conditions which existedprior to an event. Such images may often provide valuable informationconcerning activities that preceded and/or caused the event.

In this exemplary embodiment, from the RAM cache store, image andtransaction data is transferred in the system to a disk cache store 78.From the disk cache store 78, image and transaction data is subsequentlytransferred to an archive store component 80. The archive storecomponent may in some embodiments be a permanent or temporary storagemedia such as a removable storage media as hereinafter described.Alternatively the archive store disk may be a CD-R/W type device orsimilar storage media which may provide temporary or permanentnon-modifiable storage of image and/or transaction data. Alternativelyvarious types of storage devices that may be off loaded or overwrittenmay be used.

The archive store component operates in connection with a filemanagement component 82. The file management component 82 operates inaccordance with programmed instructions to perform various operations.The file management component works in connection with other componentsto provide access to stored image and transaction data. The filemanagement component also enables control of available memory tofacilitate storage of data and minimize the risk that transaction andimage data will be lost.

As represented in FIG. 4 the file management component 82 may work inconnection with interface 84 to provide access through an intranetschematically indicated 86. As previously mentioned, terminals connectedto the intranet may be used to access the stored data. A server 88 whichoperates as a firewall may be used to provide selective access to theintranet and to provide access to other networks. Such other connectednetworks may include a wide area network such as the Internet.

Alternatively an interface 90 may be used to provide access directly tothe Internet schematically indicated 92. Appropriate controls may beused to minimize the risk of unauthorized access such as passwordsand/or public key encryption. Digital signatures, session keys and thelike may also be used to limit access to authorized persons.

An interface 94 may be provided to telephone communications networks.This may be accomplished through a dial up connection or a cellularconnection. Such an interface may be provided for purposes of sendingmessages such as pager, fax or voice mail communications selectively toremote users or facilities.

An interface 96 to a lease line or other dedicated communications linemay be provided for purposes of providing for both messaging and datacommunication. Of course in other embodiments other types ofcommunications interfaces for communicating messages and for providingaccess to image and transaction data may be used. The particularconfiguration used will depend on the needs of the system and thecapabilities of the remote communications method.

As discussed previously, the file management component 82 may be inoperative connection with a fixed local storage component such as a datastore schematically indicated 98. The local data store 98 in someembodiments may include database software operating in a data store inconnection with a processor or computer in the automated bankingmachine. Alternatively the database may operate on the computer withinthe image recorder device 40 or in other computers operatively connectedwith the image recorder device.

In some embodiments, the image recorder device 40 or a connected devicemay include an image and transaction data recorder schematicallyindicated 100 in FIG. 4. The transaction data recorder operates torecord image and/or transaction, or other data on a removable storagemedium 102, such as a CD-R/W or other storage device. Such a removablestorage device may include a permanent storage media which requiresperiodic replacement, but which is not subject to later possiblemodification as is the case with erasable storage. Such removablestorage media may work in conjunction with other local storage or remotestorage. Operating under the control of the file management component82, this feature may in some embodiments enable storage of data in otherdata stores which accept overflow data on a temporary basis when theremovable storage medium has become filled. When the removable storagemedia is changed, the recorded data in temporary storage in the otherdata store is transferred thereto. Alternatively, the file managementcontrol component may operate to periodically erase images and data asstorage space is needed. This may be done selectively based on the ageof the image, the nature of the event causing image capture or otherparameters. Of course other approaches may be used.

As previously discussed, the file management component 82 mayalternatively operate to cause the computer within the image recorderdevice to off-load image and transaction data. The off-loading of datamay be made to remote storage devices schematically indicated 104associated with connected terminal devices to which data may be sentthrough the network 44. Of course in alternative embodiments otherapproaches and techniques may be used.

FIGS. 5 through 9 are schematic views which represent the operation ofcomponents comprising executable instructions in exemplary embodimentsof the system. These components are preferably software components whichoperate in connection with the record acquisition component 68 and thedevice switching control component 66. In FIG. 5 a logic flow associatedwith motion detection is shown. The inputs from the cameras or the otherinput devices are processed by a detection area definition component106. The definition component contains data and instructionsrepresentative of one or more detection areas in the field of view ofparticular cameras that are to be analyzed and/or disregarded forpurposes of detecting motion.

In some systems motion may be occurring fairly frequently within a fieldof view of the camera, but such motion is not of interest and it isdesirable to not capture image data in response to such motion. Forexample when a camera is located in the security area from which theserviceable components of the banking machine are accessed, motion maynormally occur within a portion of the field of view of the camera whilein other portions of the field of view motion only occurs when themachine is being accessed. A camera located in an ATM vestibule may havea window within its field of view. Activity occurring, outside thewindow may not be of interest and optimally should not result in imagedata being recorded. Motion detected through the window is disregardedresponsive to programmed instructions in the motion detection componentwhich excludes from the analysis movement detected within the windowportion of the field of view.

A camera positioned in the interior of an ATM housing may detect motioneven when the service door of the machine is not open. This may occurdue to flashing LEDs or other indicators within the interior of themachine. The detection area definition component 106 may definedetection areas that exclude such sources of light or motion from themotion detection analysis. In certain systems vibration or other regularmovement may cause certain fixed objects to appear to move relative to acamera's field of view. The detection area definition component may beused to exclude from the analysis images of known objects within an areaof normal movement. The detection area definition component establishesthose areas of the field of view of each camera in which changes in theimage indicative of motion are to be analyzed and/or those areas inwhich changes indicative of motion are not to be analyzed. It should beunderstood that the definition component may in alternative embodimentsapply to other sensing devices such as infrared sensors or other sensortypes which have a field of view for sensing regions in which activitiesare to be disregarded. It should also be understood that the definitioncomponent 106 may also be set such that all regions in a field of viewwhich make up an image are analyzed for purposes of motion detection.

The detection area definition component in the exemplary system may beconfigured remotely by authorized users at user terminals connected tothe network. This is preferably accomplished by inputs which divideportions of the field of view of each camera into one or more areaswhere detected motion is of interest and not of interest. Such areas arepreferably designated graphically on the output screen of a userterminal and are readily changed by inputs from authorized users.

The detection area definition component communicates with a motiondetection component 108. The motion detection component includesinstructions which operate to compare sequential images obtained fromthe camera inputs. In one exemplary embodiment this is done by comparingintensities or color of corresponding pixels in one or more sequentialor related images. The sequential or related images may be analyzed atperiods fairly close in time. Changes in intensity or color ofcorresponding pixels of greater than a threshold amount are counted orotherwise mathematically analyzed. Changes above the selected thresholdfor at least a selected number of pixels in the entire image or selecteddetection area(s) of the image, indicate a substantial enough changesuch that motion is considered to have been detected. When motion isdetected in an area of interest, the motion detection component signalsa device within control component 110 which operates the deviceswitching controller 66 and the record acquisition component 68 toacquire image data from the camera at which motion has been detected.The system may also move into more permanent storage image data capturedprior to the triggering event depending on its programming.

It should be understood that the motion detection feature is only usedto capture images from those cameras for which the system has beenprogrammed to acquire image data based on motion detection. In theexemplary system shown, this is generally in the secure areas within themachine or an exterior area adjacent the area where a servicer performsoperations. If the system is not programmed to acquire image data basedon motion detection from a particular camera, motion within the field ofview of that camera will not result in the more permanent storage ofimage data.

As previously discussed alternative systems or devices may operate tocapture images on a generally continuous periodic basis. Such images maybe temporarily stored in a queue or other memory and erased after aperiod of time. Exemplary systems may be programmed such that motiondetection may be determined based on comparisons of pixels which make upthese digitized images. The detection of motion may also cause thesystem to operate in accordance with programmed instructions to retainone or more images from the queue that preceded image in which motionwas detected, and to store these prior images in correlated relationwith the images captured in response to the triggering event. Thisfeature enables an operator to review the conditions in the field ofview of the camera prior to the triggering event. Such information willoften prove useful in determining conditions or activities which led upto the triggering event.

The memory configuration of the described embodiment provides advantagesin that the system is enabled to capture image and transaction datawhile delivering image and transaction data from storage. As a resultunlike some prior art systems, the capture of image data does not haveto be suspended while images are recovered or downloaded from thesystem. Further, the configuration of the system enables capturing imagedata from a number of sources virtually simultaneously. This solves aproblem associated with certain prior systems which when configured todetect motion, operate to record only from a particular camera wheremotion has been detected. Other image data cannot be captured whileimage data is being captured from the camera where motion was detected.This presents opportunities for compromise of such systems by creating adiversion at a first camera and then carrying out improper activitieswithin the field of view of another camera. The exemplary embodimentdoes not suffer from this deficiency as image data may be captured in aplurality of cameras virtually simultaneously, and triggering thecapture of images based on detection of motion at one camera does notsuspend image capture from other cameras. The system can also bedelivering image and transaction data to a remote location whileconcurrently capturing such data from a plurality of sources.

The motion detection feature may operate in connection with an analysiscomponent 112. The analysis component 112 may be used in variousembodiments to determine various information of interest. This mayinclude for example to measure how long it takes a particular servicerto perform particular service functions within a machine or within aservice access area. Alternatively, the analysis component may be usedto determine how long customers remain watching an output device on thebanking machine before, during or after a transaction is completed. Thismay be used to provide information concerning the degree of interestthat a particular customer or customers in general may have in aparticular type of promotional presentation that is made at theautomated banking machine or other output device. Such information maybe recorded in connection with the data store and later used for furtheranalysis. Such analysis may include in the case of the servicer,comparing performance of service providers or determining the relativeease of servicing of various types of machines or components. It canalso be used to determine if, or for how long, a servicer had activityrelated to a component in the machine. In the case of customers andusers, the analysis data may be used for targeting promotional typeinformation to users in the future and/or for evaluating theeffectiveness of marketing type activities presented through theautomated banking machine. The functions performed by the analysiscomponent 112 on the captured data will depend on the particular natureof the data to be analyzed, but such analysis may be facilitated by theavailability of image and transaction data which is stored in correlatedrelation in the data store with the movement analysis data so that thevalidity of any conclusions made can be verified.

FIG. 6 schematically represents a further aspect of the operation ofcertain exemplary embodiments. FIG. 6 represents an example of how thesystem operates to capture image and transaction data in response tohard trigger inputs. Such hard trigger inputs generally correspond tosensors which sense conditions or other activities adjacent to themachine. As schematically represented in FIG. 6, a sensor 114 providesan input signal which is received by a hard trigger logic component 116.The hard trigger logic component is operative to determine the nature ofthe input and to communicate with a timing/sequence logic component 118which controls what occurs in response to the particular inputcorresponding to a triggering event.

For example the sensor 114 may be representative of a sensor whichsenses when a service door on an automated banking machine is opened.The executable instructions programmed in connection with the systeminclude instructions which comprise a sequence which controls what is tohappen when this event is sensed. The timing/sequence logic component118 will generally include information that may be time dependent,and/or a sequence of actions which are to occur. The sequence mayinclude for example having image data captured generally continuouslyfrom particular designated cameras while the door is open. The sequencemay further include sending one or more e-mail messages to particulare-mail addresses through the network so that individuals are notifiedthat the machine has been accessed. As different entities may haveresponsibility for servicing machines depending on the date of the weekor time of day, the routing of such messages may be time dependent andthe programmed instructions may operate to send the messages todifferent addresses depending on the time that the event occurs. Suchmessages may include electronic mail messages which have one or more ofthe images captured included therewith.

The timing/sequence logic component 118 works in connection with adevice switching control component 120. The device switching component120 is operative to work in conjunction with the device switchingcontroller 66 and the record acquisition control 68 to acquire imagedata from the selected cameras through the frame grabber. The deviceswitching control component 120 may also be programmed in otherembodiments to take other actions such as to operate or interface withalarm systems, automatic locking systems or other types of devices. Inaddition as previously described the timing/sequence logic component mayalso operate to temporarily acquire images from various cameras or otherimage capture devices on a periodic basis. The programmed instructionsassociated with the particular triggering event may include storing on amore permanent basis one or more images captured prior to the triggeringevent. These images may then be stored in correlated relation in thedata store with the images related to the event. Such informationenables an analysis to be made as the causes or events preceding thetriggering event.

FIG. 7 is a schematic view of the operation of the system to acquireimage and transaction data in response to soft trigger inputs. Such softtrigger inputs may include for example messages to or from transactionfunction devices on the interface bus within an automated bankingmachine. Alternatively such soft trigger inputs may include transactionmessages transmitted between an automated banking machine and a host.Other types of soft trigger inputs may include receipt of otherelectronic messages either alone or in relation to other messages, so asto indicate a condition which requires image or transaction dataacquisition. Other types of soft trigger events may be initiated inresponse to timing functions which operate based on programmedinstructions and the current time, or which are timed from other events.

The soft trigger logic component 122 is operative to receive the softtrigger inputs and to analyze the nature of the conditions representedby the inputs received. For example the soft trigger logic component maydetermine based on software instructions stored in memory thatparticular signals on a bus or line being monitored represent the inputof a customer card to a card reader and the account number associatedwith that card. In certain embodiments such account data is captured aspart of the transaction record data and the input of such a card to thecard reader is used as a trigger to capture image data so that there isa record of the user that input the card. Likewise messages indicativeof the presentation of cash to a customer by a presenter may be detectedand used as a further triggering event to capture image data.

In certain exemplary embodiments a series or set of images is capturedin connection with a transaction carried out by a user in an automatedbanking machine. Such images in the set are preferably captured inresponse to the operation transaction function devices on the machine.Such images are stored and may be recovered and displayed together forlater analysis. The storage of multiple images in a set related tocustomer transactions increases the likelihood that suitable images ofthe user and/or background will be acquired which may prove useful laterif such images require analysis. In addition, the fact that account dataand/or other transaction data is captured in connection with the imagedata and can be correlated therewith, enables searching the transactiondata to recover the image data associated therewith. For example,because the transaction data commonly captured may include the accountnumber as well as the user name encoded on the card, the transactiondata may be searched using these parameters. This enables readilyidentifying transactions corresponding to these parameters and retrievalof the image data associated therewith. This greatly reduces the time tolocate pertinent images compared to other systems. In addition, othertypes of sorting parameters may be used to recover images. These includefor example, time periods during which transactions were conducted,amounts of deposits, amounts of withdrawals or other transactionparameters. Any of these transaction parameters that are stored inconnection with or which may be correlated to image data may be used toselectively identify and recover images. Some exemplary embodiments mayutilize face recognition software, such as is available from Lernout &Hauspie or other commercial sources, such that images may be searchedfor individuals based on data corresponding to an individual's facialcharacteristics. Other embodiments may include image acquisition devicessuch as biometric readers and scanners and image data from such imageacquisition devices may be searched for corresponding biometric data. Ofcourse in other embodiments other approaches to the capture of imagedata, transaction data and other types of soft trigger and/or searchlogic may be used.

Soft trigger logic component 122 operates in connection with atiming/sequence logic component 124. The timing/sequence logic componentis operative responsive to programmed instructions input by a userduring setup of the system. The timing/sequence logic component operatesto capture image and transaction data selectively from various camerasand/or transaction function devices depending on events that areoccurring and/or the date and time of such events. For example ifparticular transactions are occurring the timing/sequence logiccomponent may take special actions different or in addition to thosetaken with regard to other actions. An example may be when a customerseeks to deposit more than a certain amount of funds in the machine orseeks to cash or obtain value for an instrument. The timing/sequencelogic component may capture more frequent images or images fromadditional cameras during the transaction. Another example may be in thecase of a reportedly stolen card. If the soft trigger logic identifiesthe input card as stolen, the logic component may operate to not onlyacquire additional image data, but also to send messages through thesystem or through other communications channels to police or otherauthorities. Exemplary embodiments may be in connection with at leastone data store, which includes data corresponding to one or more imagesof users that are and/or are now allowed to operate the machine. Forexample, a data store may include image data corresponding to at least aportion of an image of a plurality of users authorized to carry out oneor more transactions. The captured image data for a user of the machinemay be compared to stored data and the machine enabled to operate and/orcapture certain image data in response to the authorized user's imagedata being sensed. Stored image data may also or alternatively includedata corresponding to individuals who would not be able to conduct someor all transactions. This may include for example, known or suspectedcriminals, and in response to sensing image data associated with such anindividual, the operation of the machine or the carrying out of one ormore transaction types by the machine, would be prevented in accordancewith the programming of the machine.

An alternative embodiment may be used in connection with a bankingmachine which includes check accepting or other document acceptingdevices where the authenticity of the inserted document may requireverification. The timing/sequence component may work in connection withan imaging device within the automated banking machine to capture animage of indicia on the inserted document, and to transmit an image ofthe document while the transaction is ongoing to a verification terminalin the network. Such a document may be viewed at such a terminal and/orelectronically analyzed to compare the image of the document toverification information such as a handwriting or signature database forpurposes of determining authenticity. The destination where suchmessages are sent may be varied depending on the nature and/or amount ofthe document, the time of day and other parameters depending on theinstructions associated with the timing/sequence logic component 124.

Other exemplary applications of timing/logic sequence include minimizingthe use of available image data storage by reducing or eliminating theamount of image data acquired related to certain transactions. Forexample the timing/logic sequence may include instructions to capturefewer or no image data related to transactions conducted that are ofcertain types. This may be appropriate for example in the case of anaccount balance inquiry. Likewise the instructions may provide that adispense of cash below a particular amount, such as for example $100,may not result in the acquisition of image data. Likewise, certaindeposit transactions for certain customers within certain limits may notrequire the capture of image data, or may have the system capture alesser number of images than is captured in connection with othertransactions, or the same transaction carried out by another user.

The timing/sequence logic component 124 may operate in connection withinstructions that capture additional image data in connection withcertain transactions by certain individuals. Additional image ortransaction data may be captured based on selected time of day, or acombination of time and day, amount or the nature of the individualcustomer. Various schemes for using customer profile data, time of daydata and other information accessible through the network may be used incombination with the soft trigger inputs to selectively control theimage and transaction data capture capabilities, and the message sendingand device control capabilities of the system in response to selectedcircumstances that may arise in the operation of the automated bankingmachine.

A device switching control component 126 operates responsive to thetiming/sequence logic component to capture image data during thetransaction. The device switching control component further operates tocapture transaction data in connection with the transaction. This mayinclude for example time and date data, account number data, amountdata, transaction number data, user name data, machine location data andother data which can be derived from the soft trigger inputs or otherinformation available to the machine. Such data may also includemultiple items of similar data such as time data. This may be desirablefor example when the ATM has an internal clock and the image storingdevice has its own associated system clock which may not be perfectlysynchronized with the ATM clock. Capturing time data corresponding toboth clocks may avoid confusion. Alternatively, programming may beprovided for automatic clock synchronization and/or for obtaining timedata or setting signals from another source.

In exemplary embodiments, the nature of the related data analysis can beset by the user during setup of the system. This is done through a userterminal and is preferably accomplished by selecting options in a setupwindow such as shown in FIG. 25. The related data analysis and storagecomponent 128 operates to capture and store the selected data. The dataanalysis and storage component is further operative to store the relatedtransaction and other data in correlated relation with the image data.In certain embodiments of the invention such correlation is provided bystoring data representative of the time and date associated with theimage data and transaction data. In other embodiments other approachesto correlate the image and transaction data may be used.

In alternative embodiments the data storage and analysis component 128may also include instructions for analysis of received data such as toprovide statistical analysis related to use of the machine. Such datamay be used in connection with developing a historical use pattern forthe machine which may be used in connection with the memory allocationactivities performed by embodiments of the system as later discussedherein.

FIG. 8 is a schematic view of the logic flow associated with operationof embodiments where a lack of usable video information is detected witha camera that is to be operated in the course of a transaction. Itshould be understood that the lack of a usable video logic may operatein connection with the motion detection logic, hard trigger logic orsoft trigger logic previously described.

A lack of usable video detection component 130 operates in response toexecutable instructions to determine if a camera that is or may need tobe operated is not providing suitable image data. This is done in anexemplary embodiment by comparing pixel data from the areas of the imagethat are indicated to be of interest by the detection area definitioncomponent 106 or from the entire field of view. The lack of usable videocomponent 130 determines if pixels which comprise an image are generallyall above or all below certain intensity or color levels and/or arelacking in contrast across the image so as to not provide a suitableimage. The logic may check for example if generally all pixels areindicated as dark, which may suggest that a camera is being blocked or alens has been spray painted so as to obscure the camera. Likewise thelogic may check to determine if the pixels are generally all above acertain intensity value which may indicate that a glare conditioncreated by reflected sunlight or a light operated by a person isobscuring a camera. The lack of usable video components may also operatebased on detecting a rapid, large change in the field of view, or such alarge change followed by an extended period without any change. A lackof usable video may also be based on detection of certain relativelyunchanging high contrast images or sensing an unchanging image in aselected portion of a field of view. The lack of usable video component130 may also be operative to detect that the camera signals have beeninterrupted. Various approaches may be taken to making a determinationthat there is a lack of usable video.

A timing sequence logic component 132 operates responsive to component130 to take action in response to the condition. The action is taken inaccordance with a programmed sequence which in the exemplary embodimentis set up by a user and stored in a data store. The sequence may includefor example responding to a lack of usable video by capturing image datafrom additional cameras. For example if in FIG. 1 camera 24 is unable toprovide usable video, image data may be captured from camera 26. Theprogramming of the system may also operate in response to detecting alack of usable video event to store in connection with the event one ormore prior images that had been obtained and stored temporarily from thecamera which is considered to be no longer providing usable video. Suchimages may be useful in determining the cause of the loss of usablevideo and/or the identities of persons which may have caused the loss ofvideo.

In some exemplary embodiments the timing sequence logic component inresponse to the lack of usable video may cause the server component togenerate a message to selected addresses in the network to indicate thenature of the condition. Such messages may include therewith one or moreimages. Likewise the timing sequence component may formulate messages toservice entities responsible for repairing the system to indicate thatthere is a problem. In alternative embodiments the timing sequencecomponent 132 may operate to perform activities through additionalinterfaces or computers such as turning on alarms, actuating additionallighting, contacting police authorities and/or disabling the automatedbanking machine. Such activities may be performed depending on the setupof the system as programmed by user.

The timing sequence logic component 132 operates in connection with adevice switching control component 134. The device switching controlcomponent operates to capture image data responsive to programmedinstructions and may also interface with other devices and systems tocarry out functions determined by the timing sequence logic.

FIG. 9 shows an alternative logic flow used in connection withembodiments in which features of a user are used to identify and/orauthenticate the user or actions carried out thereby. The logic flowrepresented in FIG. 9 includes an identification data acquisitioncomponent schematically represented 136. The identification dataacquisition component in an exemplary embodiment operates to acquiredata with a camera or other device for acquiring image data concerning aphysical feature of the user. For example camera 24 may be used toacquire camera signals corresponding to a face of the user. Anidentification processing component 138 is used to compare the imagedata acquired to image data corresponding to a set of authorized users.Such authorized user data may be stored in a data store. Asschematically indicated this data store may be within the automatedbanking machine or may be accessible through a network. Suchidentification processing may process not only user image data but alsoother data such as data from an object provided by a user, voice data,iris scan data, retina scan data or other data that can be used toindicate that a transaction is authorized.

If the identification processing component 138 is unable to identify theuser then such information is provided to a machine control interfacecomponent 140. The interface component prevents operation of the machinebut operates the system to capture image data related to the person whowas unable to operate the machine. Alternatively if the user isidentified as an authorized user by component 138, the machine controlinterface may authorize further operation of the machine, or mayauthorize such further operation if other indicia such as voice, numericor other inputs correspond to the authorized user. Again the machinecontrol interface component will operate to acquire image dataconcerning the authorized user. A data analysis storage component 142operates to store data related to the transactions conducted by theauthorized user and is operative to store transaction data in the datastore. This may include the various types of transactions conducted bythe user and may further include storing in correlated relation with theuser data, data representative of instruments deposited by such a user,instruments produced for such an authorized user or other informationrelated to the user's transaction which is stored for later recovery.The nature of the transaction information captured will depend on thenature of the automated banking machine and the image and transactiondata captured in connection therewith.

The capture of images from the various cameras on a continuing basis inembodiments of the system may also be used for other purposes. Forexample, the facial features of criminals, missing persons or otherindividuals of interest may be stored in connection with the data store.The system may operate so that content of images captured on acontinuing basis from cameras, or alternatively images captured inresponse to triggering events, are analyzed so that the facial featuresof persons in images are compared to images stored in the data store.Responsive to finding a match the system may operate in response toprogrammed instructions to trigger a sequence which may includecapturing additional images, sounding alarms or sending messageselectronically to selected individuals or entities. In some embodimentsthe machine may also operate to avoid carrying out one or moretransactions for such individuals such as preventing delivery of one ormore documents to such individuals, for example tickets fortransportation. Messages sent may include therewith the captured imagesas well as information concerning the person who was indicated to berecognized. Such facial recognition may be carried out for example insome embodiments using software such as Face-It™ software which iscommercially available from Lernout & Hauspie. Of course in otherembodiments, other components and approaches to recognizing persons andimages may be used.

In addition, because some embodiments may include image data stored inresponse to transactions and other triggering events, the stored datamay be retrieved using the parameter of facial features or a particularindividual's appearance. This may be done for example to identifyinstances where a particular service person has worked on a particularmachine. Alternatively transaction data may be reviewed to determineinstances where a particular individual may have used the debit orcredit cards of another person in conducting transactions. Numerous usesof searching through the image data using such parameters may be used.

Alternatively or in addition, the image data received by the system maybe analyzed on a real time or periodic basis for the presence of otherfeatures in images. For example, images captured from a camera adjacentto an automated banking machine may be analyzed for the presence ofcertain objects which appear in the field of view of the camera. Suchobjects may include for example certain types of criminal tools used toattack the automated banking machine. Alternatively, objects which maybe recognized may include certain types of weapons or other objects.Various body positions such as a person raising their arms or lying downmight also be recognized. In response to a captured image having theimage condition of including an object or characteristic whichcorresponds to one which is recognized by the system responsive tostored logic, appropriate responsive actions may be taken. Again, suchactions may include sounding alarms, shutting down the automated bankingmachine and/or sending messages including messages which include imagesto programmed addresses or devices. Embodiments of the invention mayoperate in conjunction with or as part of a system as described in U.S.Pat. No. 5,984,178 which is owned by the assignee of the presentinvention and the disclosure of which is incorporated herein byreference as if fully rewritten herein. The identification of particularindividuals, objects or features in the field of view of a camera may beoperative to cause the dispatch of messages through one or more types ofmessage media to predetermined recipients of such information. Thedispatch of messages may include synthetic voice messages dispatched byphone or similar media, paging, radio messages or other types ofmessages. In addition, the responses to such messages may be monitoredand tracked in accordance with programmed parameters to assure anappropriate response occurs.

A further advantage of some embodiments is that the stored image data iscapable of being searched for other visual conditions or appearancefeatures. For example, stored image data may be searched to uncoverimages which were stored of users with certain facial characteristics.Such characteristics may include features that may be recalled byanother person of a potential witness to an activity which occurred inthe area where the image capture system is operating. Such image capturecapability enables images to be sorted to look for persons with featuressuch as certain hair color, facial hair, skin color, tattoos, earrings,jewelry, or glasses as well as for certain types or colors of apparel.This may include for example hats, ski masks, bandanas, ties andjackets. Of course, as previously discussed such features may alsoinclude features of a face of a particular individual. The ability ofcertain embodiments to sort through image data and to recover imagesbased on one parameter or a combination of parameters enables therecovery of images that using prior systems would require considerablygreater time and effort. As can be appreciated from the foregoingdescription, embodiments may provide many uses and advantages comparedto prior art systems.

FIG. 10 is a schematic view of an alternative form of a transactionrecord system generally indicated 144. System 144 includes an automatedbanking machine which in the exemplary system is an automated tellermachine schematically designated 146. Automated teller machine 146 issimilar to the ATM described in the previous embodiments in terms of itsoutward appearance and configuration. However, the computer and softwarearchitecture of ATM 146 differs.

ATM 146 includes a plurality of transaction function devices 148. Thetransaction function devices include devices which can be used to carryout transaction functions with the machine. These may be similar to thetransaction function devices of the previous embodiment. The transactionfunction devices generally include input devices such as a card reader,keypad, touch screen and/or function keys. The transaction functiondevices may also include devices for dispensing sheets and currency suchas a bill dispenser and bill presenter. The transaction function devicesmay also include a depository, printing devices for printing transactionreceipts, printing transaction records and other documents. Thetransaction function devices may also include a number of other devices.

The transaction function devices are operative in response to a devicemanager/interface component 150. The device manager interface componentmay be comprised of applets, programs or other applications written in alanguage such as JAVA by Sun Microsystems or Active X and/or C# byMicrosoft. Component 150 preferably includes data and instructions whichrepresent operational relationships among the devices, and such data andinstructions are schematically represented by a data store in connectionwith component 150.

The device manager/interface component 150 preferably operates thedevices in response to HTTP format messages which are delivered by adevice server 152. The device server 152 similarly includes a pluralityof applets or other programs which operate responsive to messagesreceived by the device server. The device server contains theinstructions which generally operate to control, coordinate and limitthe operation of the transaction function devices within the ATM.

ATM 146 further includes a document handling portion 154. Documenthandling portion 154 is operative to process HTML documents and HTTPmessages which the document handling portion selectively accesses. Thedocument handling portion 154 includes a browser for selectivelyprocessing HTML documents or other documents. The documents accessed bythe browser may include therein instructions such as JAVA script whichare processed by the browser and which are operative to cause a computerto output messages through an output device such as a screen display ofthe ATM. The document handling portion 154 of this example furtherincludes a server device that is operative to output messages to theother components of the machine as well as to a network 156 to which themachine is connected. The document handling portion 154 may access HTMLor other documents through a bank server 158 or other servers which areconnected to the network 156. The bank server 158 may also send andreceive messages from the device server 152 and other components of themachine. As shown schematically, the bank server 158 is in operativeconnection with a back office processing system 160. The back officeprocessing system is operative to maintain data records and accountinformation, as well as to provide information for generating documentsand messages which are delivered by the bank server 158.

It should be understood that ATM 146 may be operated through messagesexchanged with plurality of servers which are connected to the network156. This may include other bank servers directly connected to thenetwork 156 as well as bank servers which are connected to a furthernetwork 162 which can be transmitted through a control server 164. Anexample of such a system would be a system in which network 162 is awide area network such as the Internet and control server 164 serves asa firewall limiting the servers from which the automated teller machine146 may receive instructions.

It should further be understood that the document handling portion 154,device server 152 and device manager/interface component 150 may in someembodiments comprise components which communicate through the operatingsystem of the computer on which the components reside, or maycommunicate on a local area network which operatively connects thecomponents of the machine. It should further be understood that in otherforms of the invention the machine may be connected directly to the widearea network.

In the exemplary embodiment shown in FIG. 10, the server componentassociated with an image recorder device resides on the computer whichoperates at least some of the transaction function devices of automatedteller machine 146. An image server component 166 is resident on thecomputer within the automated teller machine and is accessible throughthe network 156 at an address on the machine. As in the priorembodiment, the image server is in operative connection with at leastone data store 168. The data store 168 includes executable instructionscarried out by the image server as well as image and transaction data.It should be understood that the data store 168 may represent a portionof overall memory available in connection with the computer operatingthe automated teller machine 146. Alternatively data store 168 mayinclude a separate data store such as a recorder with a removablestorage media or a combination of allocated storage available on thecomputer in the machine and a separate data storage device.

It should be understood that in certain embodiments the computer in theautomated teller machine 146 operates in a Microsoft Windows NT® 2000,or XP software environment and data storage is allocated between thecomponents operating in the machine. Further the transaction datastorage associated with the captured images accessible through the imageserver is shared with other transaction data storage maintained fortransactions carried out by the machine, to reduce duplicate storage ofdata. Such transaction data storage information may be stored in themachine for purposes of archiving or accumulating batch data which maybe later transferred to the back office 160 through the bank server 158or to other locations. It should further be understood that in someembodiments, image data may be downloaded to other devices connected tothe network 156 and accessed therefrom while transaction data may bemaintained in storage at the ATM or in a different data store within thenetwork. The downloaded data may be erased or overwritten afterdownloading to provide added storage space at the machine. Alternativelyimage data may be downloaded with or at generally the time of eachtransaction at the machine.

The exemplary embodiment enables accessing image and transactioninformation from different locations. This is accomplished bycoordinating image data and transaction data which may be accomplishedin some embodiments by including with the image data, datarepresentative of source as well as information corresponding to a timeassociated with the transaction as previously described. This enablescorrelating the image data with the source transaction datacorresponding thereto based on time and date. Of course otheralternative approaches to recovering and correlating transaction andimage data may be used.

As shown in FIG. 10 image server 166 is connected to a hardwareinterface schematically represented 170. Hardware interface 170 is shownconnected to cameras 172 as in the previous embodiment. Hardwareinterface 170 of the exemplary embodiment performs the switching,acquisition control, digitizing and hard trigger receiving functionsdescribed in connection with the previous embodiment. Interface 170 mayalso be used to provide outputs for controlling camera aiming devices(such as pan/tilt/zoom), focus devices, lighting and other devices. Itshould be understood however that the allocation of such functionsbetween a plurality of hardware and software components may be achievedin various ways within various embodiments.

In the embodiment shown in FIG. 10 the image server 166 is in operativeconnection with components 150, 152 and 154 which are primaryoperational components of the ATM. Such configuration readily enablesconfiguring the image server to cause the capture of image and/ortransaction data in response to soft triggers which are in the form ofevents which are fired to components in connection with the server. Suchprogramming may be readily accomplished through visual programming toolsused in connection with programming in JAVA and other languages. Suchprogramming tools may include Visual Age® by IBM and Visual Studio™ byMicrosoft. Use of such programming enables readily establishing andchanging the soft triggers for image and other data acquisition as wellas readily changing actions which may be taken in response thereto.

As shown in FIG. 10 other terminal devices may be connected to thenetwork 156. This may include user terminals 174 of the type previouslydescribed as well as verification terminals, data storage terminals andother types of terminals that work in connection with the system.Network 156 may be connected to interface devices schematicallyrepresented 176, which provide gateways to other communications mediumsof the type previously described. Such gateways may be used for sendingmessages to servicers, police authorities or other persons who are toreceive messages in response to events which occur at the ATM based onthe sequence of configuration data for the capture of image data storedin connection with the image server or other computer.

As can be appreciated from the configuration in FIG. 10 an authorizeduser operating a user terminal can access image data by accessing theimage server with a browser and recovering image data from memory. Thisconfiguration further facilitates analysis of image data by being ableto correlate transaction activity and the operation of transactionfunction devices with image data. Further the capability of theexemplary embodiment of the invention to capture image and transactiondata while virtually simultaneously delivering image and transactiondata to a remote user, facilitates maintaining ATM 146 in operation.Actions in response to triggering events may include panning, tilting orzooming cameras which may be used to verify suspect lack of usable videoevents or as actions in a sequence. Other advantages of this embodimentdue to the flexibility and the ability to readily make changes inconfiguration will be appreciated by those skilled in the art.

An alternative embodiment generally indicated 178 is shown in FIG. 11.The system 178 includes an automated banking machine which is anautomated teller machine generally indicated 180. ATM 180 is similar toATM 146 previously described except as discussed herein.

ATM 180 includes a computer which includes an image server 182. Imageserver 182 operates in a manner similar to image server 166. Howeverimage server 182 instead of acquiring image signals through a hardwaredevice obtains image signals from a connected network 184. In the systemshown in FIG. 11 cameras 186, 188 and 190 are each connected to a miniserver 192, 194 and 196 respectively. The cameras and mini servers areeach operative to function as a network node in connection with network184. Each network node includes hardware and software which converts thecamera signals to image pages or similar image files that can betransmitted through the network 184. These images can be relativelyspaced in time or close enough together to be considered as full motion.The programmable instructions executed in connection with image server182 are operative to selectively access the cameras through theassociated mini server and to download images therefrom. Such images maybe stored as image data in correlated relation with transaction data inthe data store within the automated teller machine. Alternatively imagedata may be stored in data stores associated with each of the miniservers so that it may be selectively accessed therefrom by image server182 as well as from other authorized terminals within the network.

As can be appreciated, this alternative configuration furtherdistributes the acquisition of image data and transaction data. Howeveras the transaction data is accessible through the image server 182, andthe system location of the mini servers 192, 194 and 196 are each knownfrom their associated URL or similar system address, correlation andrecovery of image and transaction data may be readily accomplished. Itshould further be understood that while in the configuration of thesystem shown in FIG. 11 each camera is shown with an associated miniserver, a group of several cameras may be interconnected and mayselectively deliver image data through a single mini server to thenetwork. Alternative configurations may be used to suit the particularnature of the system being operated.

FIG. 12 shows yet another alternative system generally indicated 198.System 198 includes an automated banking machine which is indicated asATM 200 which may be generally similar to ATM 146. ATM 200 is connectedto a network 202. A computer including an image server 204 generallysimilar to image server 166, operates on ATM 200. Cameras 206, 208, 210and 212 operate to supply camera signals which are received by imageserver 204 through an interface 214. In this embodiment the interface214 is an interface to a second network schematically indicated 216 inwhich the cameras are connected. The interface 214 may include aninterface to a power supply network to which cameras are connected.Interface 214 may be for example an interface to a power distributionsystem within a facility in which the ATM is operated. An X-10technology type of communication may be used for example. Signals fromthe cameras 206, 208, 210 and 212 are superimposed on the powerdistribution line through a plurality of impedance matching interfaces220, 222 and 224 respectively. Signals sent by interface 214 areoperative to cause selected ones of the cameras to output camera signalssuperimposed on the power distribution lines. Such image, signals may bereceived at interface 214 and processed in the manner similar to othercamera signals as previously described. Camera signals sent in thesecond network may take various forms of analog and digital signals andmay be multiplexed or otherwise sent simultaneously so that image datamay be acquired and captured selectively by each of the cameras asdescribed in connection with the previous embodiments. Signals forcontrolling or positioning cameras may also be transmitted through thenetwork as well as image data.

FIG. 13 shows yet another embodiment referred to as system 226. System226 includes an automated banking machine 228. Machine 228 is an ATMsimilar to ATM 146 except that it includes among its transactionfunction devices a check or other document imager schematicallyindicated 230. ATM 228 operates to accept checks or other instrumentsfrom users of the machine in response to control by the othercomponents. The imaging device 230 operates to produce document imagesignals representative of documents that may be deposited or received bya user in the machine. An image server 232 or a computer in which itoperates is operative to cause the capture of images produced by theimaging device and store image data responsive thereto in the associateddata store. In addition, the computer is operative to cause the machineto capture transaction data and/or to correlate transaction datacaptured by other components of the machine, with image data. Imageserver 232 and the associated computer may also operate in connectionwith cameras and other input devices similar to those discussed inconnection with the previously described embodiments. The computer mayfurther store camera image data in memory in correlated relation withdocument image data generated from the imaging device.

Image server 232 is in operative connection with a network 234. Network234 is in operative connection with a terminal 236. Terminal 236 mayserve as a document verification terminal. Terminal 236 has inconnection therewith a verification data store schematically indicated238. Verification store 238 includes therein data representative ofindicia which can be used to verify genuineness of documents input tothe machine through the imaging device. For example verification datastore 238 may include data representative of customer signatures and/orother identifying data for customers authorized to provide checks intothe machine. Document verification terminal 236 includes a computerincluding a browser therein.

The terminal 236 is controlled responsive to input devices that accessdocument image data through the image server 232. The documentverification terminal 236 operates responsive to the document image datato compare indicia in or associated with the document image data, toindicia stored in the verification data store. This may be done forexample by comparing image data related to checks or similar documentsinput to the check imager 230 to images of known genuine signaturesstored in data store 238. Such indicia may be compared for genuinenessby human comparison on a side-by-side basis by outputting suchinformation to an output device such as a screen. Alternatively the datamay be manipulated to place such signature data in overlappingrelationship or in other relative positions so as to facilitate analysisthereof. Alternatively, verification terminal 236 may includeinstructions such as software programs which are operative to compareindicia in document image data to indicia stored in data store 238. Suchverification software may compare the signature data from the inputdocument and the known genuine signature and provide an indication ofsuspect signatures or possible forgeries. This may be accomplished bycomparing the image data corresponding to contours of letters, portionsof letters or combinations of letters within a signature, and indicatingwhen a level of correspondence does not exceed a particular threshold.

Image server 232 may have associated instructions which cause documentimage data to be provided automatically periodically to verificationterminals 236. Alternatively image server 232 may be configured tooperate in connection with other components of the machine to provide anindication during a transaction involving an instrument, and to forwardsuch document image information through the network 234 so that thecharacter or genuineness of the deposited document may be verifiedbefore the transaction is completed. This has the advantage in that whencameras are used in connection with the machine, one or more images ofat least a portion of the individual operating the machine as well asthe document image data may be viewed or processed before crediting orcharging the customer's account for the value of the deposited ordispensed document respectively. The ability to capture the image of thecustomer along with the document image and to store the two incorrelated relation further facilitates tracking and minimizes fraud. Inaddition, the verification terminal 236 may operate in the mannerpreviously described in connection with user identification softwarewhich enables identifying a user by image, physical and/or othercharacteristics. This further minimizes the risk of fraud.

It should be further understood that although the exemplary embodimenthas been described in connection with a document imager and an attendedverification terminal 236, other embodiments may operate usingunattended verification terminals such as terminal 240 which operates tocarry out verification activities according to stored instructionswithout human interactions. Alternatively other embodiments may verifythe authenticity of deposited documents through watermarks, holograms,inks having magnetic, fluorescent or other characteristics or otherindicia which is indicative of genuineness of deposited documents. Otherapproaches and configurations may be used depending on the nature of thedocuments being accepted or dispensed and the indicia which must becompared or processed in order to determine the genuineness of theaccepted document.

It should further be understood that features of the system shown inFIG. 13 may be applied to systems in which documents are printed withidentifying indicia so as to enable more ready verification of theirgenuineness. This may include for example printing indicia correspondingto an image of at least a portion of a user on a check or other documentdispensed by the machine. This may be done for example, by the imageserver in response to image data from a camera or other image dataacquisition device, which has a portion of the user, for example theuser's face, in its field of view during the transaction. Such imagedata may be delivered by the image server to the printer which is one ofthe transaction function devices in the machine. The image data may beused by the printer to produce a document which includes indiciacorresponding to the image of the authorized user. The indiciacorresponding to the user may in some embodiments comprise a visualrepresentation of the user. In other embodiments the indicia maycomprise a code, arrangement, design, color or other perceptibleindicator(s) that correspond to all or selected portions of a user imagedata. Indicia may be human readable, machine readable, or combinationsof both. This indicia reduces the risk of the document being presentedby unauthorized persons. In addition or in the alternative a computer inconnection with the image server may obtain image data concerning anauthorized user, watermarks or other information from memory or fromterminals connected to the network 234 or may generate one or moreidentifying numbers or other indicia, and include such information orindicia in printed documents it produces.

Embodiments may produce an image of the user on various types ofdocuments. For example, machines that deliver checks, vouchers, tickets,scrip, food stamps, paychecks or other items may include indiciacorresponding to an image of the user on the item. This can be used toassure that the person who redeems the item is the proper person. Thismay also be used for example with coupons or other premiums which areprovided by the machine. If a particular person is issued such an item,the entity who redeems it can verify that the person who uses it is theperson to whom the item was issued. Thus the entity or device for whom aperson having the document seeks to redeem such an item for value, goodsor services can have greater assurance that the person seeking to redeemthe item is the proper person by comparing indicia on the item to dataconcerning the person. Of course, additional indicia such as symbols,codes, numbers or other characters may also be included on items issuedby some embodiments. Such further indicia may include indicia whichcorresponds to the particular transaction and/or the image of the user,and perhaps other data, on the document dispensed by the machine. Suchindicia may be read or scanned at the time of redemption for purposes oftracking the item. In addition, if at least a portion of the indicia isrelated to the image, such indicia and the image may be analyzed for thecorresponding relationship to assure that the item presented is notfraudulent. Such comparisons may be made through operation of one ormore computers connected to appropriate reading devices andappropriately programmed at a location away from the ATM issuing thedocument, where the document including such indicia is sought to beredeemed.

In some embodiments indicia corresponding to an image of the user may beincluded in transaction receipts produced by the machine. For example,producing an image of the user on the transaction receipt may providethe user with greater assurance that evidence of their transaction hasbeen recorded. Such transaction receipts also provide the user withadditional evidence that they conducted the transaction or transactionsreflected by the receipt. The printing of the image of the user on thereceipt may also serve as a deterrent to theft or fraud. This is becausethe presentation of the image on the receipt will make the user of themachine aware that images have been captured during the transaction. Asa result, a user may find it difficult to later claim they did notconduct the transaction or that their card or other item which enablesconducting transactions, was used by an unauthorized person. Likewise,criminals who may steal cards or other items may be reluctant to usethem because they know that their image will be captured by the systemif they attempt to conduct a transaction.

Exemplary embodiments may be used to enable the conduct of additionaltransaction types. For example, persons are now enabled to conductmanytypes of transactions through the use of electronic signatures.Automated banking machines or other devices may enable a user to agreethat an image may serve as their electronic signature. The image may be,for example, an image of the user's face. Alternatively, the image maybe an image of another portion of the user such as a fingerprint, irisscan, retina scan of other anatomical portion.

The operation of the machine may present one or more outputs orinquiries to the user in carrying out a particular type of transactionthat would normally require a signature to be legally binding on theuser. The user may be advised by the one or more outputs that theirrecorded image at the machine will constitute their electronicsignature. In addition or in the alternative, the user may be requiredto provide one or more inputs through an input device on the machine toagree or acknowledge that their recorded image will serve as theirelectronic signature. Of course, the image of the user may be capturedat one or more points in the transaction sequence to document the user'sagreement. The machine may then proceed with the transaction steps. Oneor more inputs by the user to the machine to indicate the user's assentto particular transaction terms (along with their image) will constitutea binding electronic signature. By preserving records in a data storecorresponding to the user's inputs and image along with the relevantterms, the operator of the machine may later establish formation of acontract on terms that would otherwise require a signature. Likewise, auser may receive from the machine a printed transaction receipt or otherdocument(s) that show the details of the particular transaction andtheir image as their electronic signature.

An example of such a transaction may be the opening of an account with afinancial or other institution at an automated banking machine. Themachine may present the user with the relevant terms through one or moreoutput devices. Instead of signing a document to indicate agreement, theuser may indicate through one or more inputs through one or more inputdevices on the banking machine that their image or portion thereof willbe their electronic signature. In some such transactions where a recordor endorsement of the user's signature is required for legal effect,such as for cashing paper checks, the user may provide one or moreinputs to indicate that their image data in conjunction with thetransaction will constitute their electronic signature for purposes ofendorsing the check. In other embodiments the user may insert a documentwith a written signature. The written signature may be captured with animage capture device and used for later verification in lieu of awritten signature card. Alternatively or in addition, images of the userproducing their written signature may be used to provide furtherevidence that the written signature is genuine. Other examples oftransactions in which a user's image may serve as an electronicsignature include endorsement of checks, taking out loans, purchasingsecurities, purchasing insurance, acknowledging privacy notices and anyother transaction that may be legally consummated using an electronicsignature. In some embodiments indicia corresponding to at least oneimage of at least a portion of a user may be recorded in a data storeand/or recorded on a document in the machine to record such user'selectronic signature, endorsement or agreement to contract terms. Insome exemplary embodiments, an automated banking machine may operate toproduce or receive documents for which a signature has legal effect. Anexample of such a document may include a negotiable instrument such as acheck to which an endorsement or signature must be applied by the holderto cash the check. Of course in other embodiments automated bankingmachines may operate to issue negotiable instruments or other documentsin which an electronic signature applied through operation of themachine serves as the maker's electronic signature.

In an exemplary embodiment an automated banking machine may be used forreceiving checks from a user to be cashed by the machine. In such anembodiment the controller of the machine may cause the machine tooperate in accordance with its programmed instructions to instruct theuser on the operation of the machine and to prompt the user to provideinputs. In this exemplary embodiment the user provides the check intothe machine where it is acted upon by a document processing device. Inthe exemplary embodiment the document processing device includes animager which is operative to produce data which corresponds to a visualrepresentation of the document. In some embodiments this visualrepresentation may comprise the entire document (including in some casesboth sides) while in others the data may represent selected portionsthereof. The machine presents to the user outputs through one or moreoutput devices asking the user if they agree that one or more inputsthat they provide to the banking machine will be all or a portion of theuser's electronic signature for purposes of the document. In response toreceiving such an output the user may provide one or more inputs throughinput devices on the machine to indicate that they do not agree or thatthey do agree that the user's electronic signature will include at leastone input to the machine.

In an exemplary embodiment if the user indicates such agreement, thecontroller is operative to cause an image acquisition device to acquiredata corresponding to at least one image of a portion of the user. Suchan image acquisition device may in some embodiments include a camera. Inother embodiments the image acquisition device may include a biometricreading device or other type of input device that can capture image datafrom the user. In the exemplary embodiment the data corresponding to theat least one image of the user is stored by the controller in a datastore along with data corresponding to the input provided by the userindicating agreement as to their electronic signature. In someembodiments the data corresponding to the user's one or more inputs, theimages of the user and the data corresponding to the image of thedocument may be stored in correlated relation with one or more of theother items of such data for purposes of documenting the transaction andfor purposes of establishing the genuineness of the user's electronicsignature in connection with the document.

In the exemplary embodiment the controller operates in response to thedata corresponding to the at least one image of the user to operate amarking device in the banking machine. The marking device in theexemplary embodiment operates to apply indicia corresponding to the atleast one image to the document. In some exemplary embodiments thisindicia may correspond to a visual representation of a portion of theuser such as the user's face. In other embodiments the indicia maycorrespond to a user's fingerprint or iris scan depending on the type ortypes of image acquisition devices utilized by the automated bankingmachine. In other alternative embodiments the indicia may include codes,symbols or other arrangements produced by processing the datacorresponding to the image or images of the user (and perhaps with otherdata) so as to produce such items that can be later documented asgenuine. In addition or in the alternative the indicia may includemachine readable indicia which may later be read through the aid of amachine and correlated with the image data and/or other data toestablish the genuineness of the user's electronic signature.

In some exemplary embodiments the indicia which corresponds to theuser's electronic signature may be printed on the document by themarking device. The document may then be imaged by the imager in theautomated banking machine so as to produce a record of the check and itsendorsement. Thereafter in some embodiments the check may be stored in astorage location in the machine. In alternative embodiments the checkmay be permanently marked or otherwise rendered unsuitable for furtheruse and either stored in the machine or returned to the user. Byreturning the cancelled check to the user the need for storing checkswithin the automated banking machine may be reduced or eliminated.Further as can be appreciated the imaging of the check provides datawhich can be provided to the maker of the check for purposes ofestablishing that the check was cashed by the holder. In someembodiments the maker of the check may be able to access image dataonline in the manner previously discussed so as to review checks whichhave been cancelled through operation of the machine. In someembodiments the maker of the check may also be enabled to access datacorresponding to images of the machine user presenting the check shouldit be necessary to establish the identity of the holder that cashed thecheck. Alternatively schemes may be devised for recovering image data orproducing image data or other information to establish the identity ofthe person cashing the check based on the indicia which corresponds tothe electronic signature that is applied to the check.

It should be understood that the principles of having a user of anautomated banking machine provide an input indicating agreement that theuser's electronic signature shall include at least one input to themachine, may be applied to other types of transactions other than checkcashing. In addition the use of data corresponding to at least one imageof a portion of a user as a user's electronic signature may be appliedto many types of transactions that can be carried out through anautomated banking machine.

Exemplary embodiments may also provide additional capabilities. Forexample, an automated banking machine may acquire images at times notnecessarily related to transactions. The one or more cameras associatedwith the machine may be used as a surveillance system. For example, aretail establishment may use the one or more cameras on or in connectionwith the banking machine as a premises surveillance system as well asfor use in connection with transactions. As will be appreciated from thediscussion herein, the capabilities of embodiments to capture imagesfrom multiple cameras generally simultaneously facilitates use for thispurpose as surveillance of other areas of the premises may continue evenwhen the machine is being used to perform transactions.

Exemplary embodiments may also be used for other functions. For example,embodiments may be used instead of a time clock for workers in aparticular location. For example, workers entering or leaving work maypass by or stop at the machine so that their image is recorded. This maybe in conjunction with the employee having to provide certain inputs, orconduct a particular specified type of transaction sequence at themachine. For example the worker may have a special employee card that isused by the machine to record data indicating that the person isarriving or leaving the work site. Alternatively, a card normally usedby the employee for banking or other transactions may be used in themachine to record arrival or departure. The machine may be programmed toconduct a particular non-financial transaction to record suchactivities. Alternatively, the user could be paid on a daily or otherperiodic basis directly from machine for work done. This may be done bythe machine dispensing to the user items of value such as cash, a checkor scrip for time worked. Such documents may include visualrepresentations of a payee's face or other indicia corresponding to thepayee or individual authorized to cash or redeem the document aspreviously discussed. Alternatively or in addition, embodiments may useface recognition or other biometric recognition techniques for purposesof identifying persons who pass the machine. Of course, it should beunderstood that while in this exemplary embodiment the machine is usedfor timekeeping purposes, the principles of the described system may beapplied to other functions as well.

Embodiments may also be used to make payments. This may include, forexample, making payments for payroll, public or private benefits, gamingwinnings or other amounts. For example, an automated banking machine maybe used to make payroll payments to employees. Such function may beintegrated with the timekeeping function previously discussed so thatemployees are issued payment for work on a periodic basis. Likewise,persons who are entitled to receive payments may conduct particulartransaction sequences at the machine or otherwise elect to receivepayments from the machine.

Captured image data at the machine may be used to identify or verify theidentity of the user at the machine. This can be done through access toimage data in local or remote data stores. If the machine issuesinstruments such as checks, for example, an image of the person to whomthe instrument is issued may be recorded by the system. An image of theuser at the machine who receives the instrument may also be produced onthe instrument. Alternatively or in addition, a previously stored imageof the person to whom the instrument is authorized to be issued may beproduced on the instrument. In this way a person redeeming theinstrument may compare the images on the instrument and/or theappearance of the person presenting the instrument, to verify that theinstrument is properly issued and redeemed. In addition or in thealternative, one or more images may also be produced on the receiptrelated to the instrument as well.

In some embodiments the user may receive cash at the machine in theamount they are entitled to receive. In such circumstances images may becaptured to document the payment and to minimize the risk or fraud. Insome embodiments the amount that may be paid out by the machine may notbe able to match exactly what the user is entitled to receive. This maybe due to the fact that the amount the user is entitled to receive mayrequire payment to be made at least in part in coin or some other typeof value which the machine does not dispense. Likewise, the machine maydispense only certain bill denominations and the payment to the userrequires some smaller denominations to be paid in full. In suchcircumstances the machine may dispense an amount as close as possiblebut below the amount which the user is entitled to receive. The machinemay also produce a document which can be redeemed by the user for cash,goods and/or services for the balance. Such a document may include animage of the person or other indicia corresponding to the personentitled to receive such amount. Such a user may take the document to ateller, check-out counter, machine or elsewhere and receive the cash,goods, services or other value for the balance. The image of the userand/or other indicia on the document may be used to help assure that thedocument is redeemed by an authorized person.

Further alternative embodiments may enable correlating image andtransaction data for documents received or produced by the machine. Thisenables users at other terminals which have access to the network 234 toverify the appearance features, such as the appearance of a person towhom a document was issued. This enables persons accepting suchdocuments to verify the authority of the person presenting the documentto possess it. In addition if the document is redeemed at anotherterminal, the image of the person redeeming the document may be comparedto the image of the person who received the document to verify that thedocument is being redeemed appropriately. This may be done visuallyusing an output device at the terminal where the document is redeemed ormay be done at a remote verification terminal in the network by anoperator or by image comparison software. Alternatively identifyingindicia in a presented document may be checked for genuineness and/orvalidity. For example, the redemption of documents may be recorded andtracked, so that upon presentment a check is made as to whether thepresented document has already been redeemed.

Similar principles may be applied with regard to data representative ofvalue which is loaded onto smart cards or similar instruments. Datarepresentative of the image of the person who has received the value maybe stored in correlated relation with indicia corresponding to thetransaction in which value is loaded and/or with identifying indiciaassociated with the card. Later when an individual presents that samecard at the same or a different terminal, an image of the personpresenting the card may be captured and/or the appearance of at least aportion of the person may be compared to the image data stored inmemory. Image data of the authorized user may also be stored in memoryon the smart card. Such image data may correspond to facial features.Alternatively image data may correspond to other features that arecapable of being viewed by eye or read with the aid of a machine such asfingerprints and iris scans. Similar principles may be applied to othertypes of transaction systems and devices to minimize the risk for fraudand abuse.

Some embodiments may enable the management of available memory tominimize the risk that image data and/or transaction data related totransactions conducted at the machine will not be captured and stored inmemory. FIGS. 14 and 15 schematically represent steps performed bycertain embodiments to manage the amount of memory resources and toselectively off-load image data when necessary. In addition theexemplary form of the logic described in connection with FIGS. 14 and 15is operative to estimate when memory resources such as a permanent imagestorage medium will become full based on transaction rates, and toforward a message to appropriate personnel of such impending loss ofmemory capability.

Referring to FIG. 14, the logic flow commences with a step 242 in whicha decision is made as to whether image data has been stored. If so, adetermination of available memory is made in a step 244. In addition arecord is made as of the available memory as of the time and date of thetransaction. This is done at a step 246. The decision is then made at astep 248 as to whether the available memory is below a particularthreshold. If so, certain actions are taken as described in connectionwith FIG. 15.

If the available memory is not below the threshold as determined in step248 a determination is made at a step 250 to calculate memory use overthe preceding set number of days, hours or other time period. At a step252 the calculation is then made as to a time to depletion (TTD) basedon the current rate of memory use. The determination is then made at astep 254 as to whether the time to depletion (TTD) is less than a setnumber of days. If so, actions are taken similar to those taken when theavailable memory is below a threshold as described in connection withFIG. 15.

If the time to depletion is less than the set threshold, the logic flowthen operates to recall from memory historical use pattern data. This isdone at a step 256. This historical use pattern data may be informationregarding the level of use of the memory based on the day of the week orother correlatable data for the machine over a period of time. Suchpattern data may involve fuzzy logic or other programming which may makeallowances for pay periods, holidays, vacation periods and otheractivities which are used to establish the historical model on which thepattern is based. Using the historical pattern data the logic flowcalculates an estimated time to depletion based on the pattern data in astep 258. The time to depletion based on the pattern data is thencompared to the threshold in a step 260. If depletion is expected tooccur based on the pattern data in less time than the set threshold,action is taken. If the time to depletion is longer than the setthreshold the pattern data is updated in a step 262 and the logic flowis repeated the next time a transaction occurs.

It should be understood that although in this described logic flow threedeterminations are made as to available memory, in other embodiments alesser number of tests or additional tests may be made. In addition thetests may be correlated or combined using fixed or fuzzy logic typeprinciples to calculate a time when depletion is expected.

In the event that there is concern about lack of memory as determined insteps 248, 254 or 260 a determination is made at a step 264 concerningwhether the instructions associated with the image server includeexecuting an image download sequence prior to the memory reachingcapacity. If so an image download sequence is executed at a step 266.This image download sequence may be to a remote terminal through thenetwork. Alternatively the download sequence may be to a hard or softpermanent or temporary storage device. Such download sequence alsoincludes clearing the portion of the memory that becomes available afterdata is downloaded or otherwise allowing the memory to be overwrittensuch that additional image data may be stored. Banking machine datawhich identifies the particular machine which generated the image andtransaction data may be added to or stored in correlated relation withthe downloaded data in accordance with programmed instructions tofacilitate analysis after the data is downloaded.

If the computer and associated image server is not configured to conductan image download, a determination is made at a step 268 concerningwhether available memory may be reallocated. In some circumstances thememory allocated for storage of images may be expanded to includeadditional memory. This may include for example a dynamic reallocationof memory storage by the operating system of the machine based onresources being utilized. Such memory may be allocated on a temporary orpermanent basis. If memory reallocation functionality is provided areallocation sequence is executed in a step 270.

If memory reallocation is not available, a determination is made at astep 272 as to whether a notification message concerning impendingdepletion of the memory has been sent within a given time window. If amessage has been sent within the time window then no further action istaken. However if a message has not been sent within a given time windowa message is formulated by the image server at a step 274. This messagepreferably includes data as to the particular machine and when theavailable memory will reach depletion based on the current rate oftransactions, historical data, threshold value or other basis upon whichthe determination to send the message was made. After the message isformulated, the device server executes the message sequence and operatesto send the message to the users who are to receive it based on theimage server configuration and the instructions stored in the system.Generally such messages will be sent as one or more e-mail messages toselected e-mail addresses in the network. Of course in alternativeembodiments other types of messages may be sent.

FIGS. 26 and 27 show examples of user screens which are presented by theimage server to user terminals as part of a configuration sequence.Through use of the templates established through these setup screensusers are enabled to configure individual e-mail and group e-mail lists.These lists include persons to be notified in the event that particularevents occur. The notification of particular individuals at e-mailaddresses is included as part of the timing and sequence instructionsstored in connection with the image server which determine what is donein response to particular events.

As later discussed in detail alternative embodiments may operate toselectively delete stored image and/or transaction data. For example,transactions may be identified by selected parameters and image and/ortransaction data associated with those transactions may be deleted. Thismay be done based on parameters such as elapsed time since thetransaction was executed. Alternatively, transaction data may be deletedbased on the type of transaction, amount or other triggering eventassociated with the image data. Thus, for example, data associated withdrawal transactions which are under a certain amount and which occurredmore than a particular number of days previously, may be deleted inresponse to programmed instructions. This frees up available space forstoring data associated with additional transactions while preservingimage and/or transaction data related to other transactions which may bemore significant. Similarly, image or transaction data captured inresponse to other types of triggering events such as alarms, servicingactivities, issuing or cashing instruments or other conditions whichcorrespond to a particular parameter or combination of parameters may bestored for longer periods of time prior to deletion and/or downloadingfrom a local memory. Various parameters for the preservation or deletionof data may be developed based on the nature of the system, thetransactions conducted and the needs of the system operator.

Alternative embodiments may operate to advise a person who is setting upsequences or operation of the system, about how long the system will beable to run before image data will need to be deleted or off loaded. Thecomputer operating to store data or in connection therewith, may storehistorical use data for the ATM or other machine. Such historical usedata, combined with the number of images that the system is configuredto capture and the degrees of associated data compression (as well aspossibly other data) may be used to calculate a period of time until theavailable memory is used. Alternatively, and particularly when nohistorical use data is present, the computer may be programmed to prompta user to provide estimates of the number or frequency of triggeringevents and/or transaction rates. This information may be used by thecomputer to calculate how long the system can operate without deletingor off-loading images. The user in response to the output of suchestimates may choose to change settings or sequences to capture more orfewer images in response to each transaction or event, or to change thedegrees of data compression. In addition the computer may be configuredto send a message to a selected user or address if transaction rateschange from the historical or estimated rates by more than a set amount,and advise of the time period available based on the actual rate ofmemory use. In response to such a message a user may choose toreconfigure the system.

The described exemplary embodiment presents a useful user interfacewhich may be used to set up the system configuration. Generally suchconfiguration is established from a user terminal which is connected tothe image server through a network. In this example the image serverconfiguration provides for three levels of activities which users areauthorized to perform. These levels correspond to categories ofprivileges and are “administrator,” “operator” and “service.” A screen278 shown in FIG. 16 shows the categories of activities and the usergroups which are permitted to perform them in accordance with theconfiguration of an exemplary embodiment.

As previously discussed, certain embodiments enable the configuration toinclude timing and sequence data which specifies what images and data tocapture, as well as what further actions to take in response to certaintriggering events. FIG. 20 shows a screen 280 which may be displayed ata user terminal to establish a sequence of events that occur inconnection with particular events. Such sequences may be programmed sothat the sequences are different based on the day of the week and/or thetime of day.

In accordance with the user interface in this exemplary embodiment,sequences are programmed by establishing a daily schedule of what is tooccur in response to events. FIG. 21 shows a screen 282 which ispresented in response to clicking on the “daily program” icon fromscreen 280. Screen 282 enables a user to configure the program toestablish what is to occur if particular events occur within a giventime window. In programming of this embodiment, if multiple sequencesoverlap days, the narrowest schedule overrules broader schedules. Forexample if a schedule is configured for weekdays but a differentschedule is configured for a specific day, the specific day schedulewill overrule the general schedule for that day. Likewise to preventinadvertent overlap of sequences, the programming of this embodimentprovides entering only a start time for a sequence. An end time is notrequired and a sequence will continue until a new sequence is begun.FIG. 22 shows a screen 284 used in an exemplary embodiment. Screen 284is generated responsive to selection of the “every day icon” from screen282.

Actions in a sequence are established by selecting the “setup sequence”icons shown in screen 284. Selecting such an icon that is activegenerates a screen 286 of the type shown in FIG. 23. Screen 286 enablesa user to establish the degree of data compression for images capturedduring the sequence. The compression level can be modified such thatdifferent sequences of events cause images to be captured at differentcompression levels which produce different image quality levels.Generally the less the data is compressed the higher the image quality.However available memory is used more quickly when the degree of datacompression is less.

In this exemplary embodiment a plurality of actions may be added to asequence by clicking on icons such as “add camera,” “add output” or “adde-mail.” In alternative embodiments, additional actions may include“repeat sequence” and “wait” type actions. Clicking on such iconschanges the system configuration so the system will take actions in asequence such as those previously discussed. Such sequences may includefor example input of instructions for capturing images from cameras,sending e-mails to individuals or groups of individuals, providingselective outputs to the control devices, or sending messages throughthe network. As can be appreciated from screen 280 various sequences maybe executed responsive to triggering events such as detection of motionin fields of view of various cameras, the blocking of one or morecameras (at any time or during a time of desired image capture), inresponse to various transaction functions carried out by transactionfunction devices or on a periodic time schedule. Screen 288 shown inFIG. 25 is an exemplary screen presented at a user terminal whichenables a user to set up the transaction data to be captured as well asto facilitate communication between the image server and the automatedbanking machine. Of course various types of transaction data can beselectively captured. This is done from screen 288 by selecting types oftransaction data to be captured. Image data may also be captured inresponse to the operation of selected transaction function devices andresponsive to the type of transaction function devices resident in themachine.

In the event that the sequence configuration includes sending e-mailmessages to selected addresses, the image server is operative to sendsuch messages in accordance with e-mail information which has beenstored in connection therewith. Screen 290 shown in FIG. 26 is atemplate for a user to use in inputting e-mail address information forindividuals. Individual e-mail addresses may be combined into e-mailgroups and a screen 292 shown in FIG. 27 may be accessed to show thegroups of individuals who are notified responsive to events which mayoccur at the terminal. The configuration of the terminal is such that aplurality of individuals may be sent an e-mail message in response tothe occurrence of a single event or other activity at the terminal. Thisfacilitates the notification of individuals in the event that severalindividuals may be required to respond.

As previously discussed, the timing aspect of programmed sequencesenables different individuals to be notified of events at differenttimes and on different days. This facilitates notifying the persons whohave the most direct responsibility for the condition at the time itoccurs. Forms of the invention may also be configured to attach orinclude in e-mails, images which correspond to the triggering eventwhich causes the notification to be sent. This may immediately providethe person receiving the e-mail with useful information about what isoccurring at the machine. A series of images or applets for themodification of images may also be transmitted with the notification.This may include for example images which occurred prior to thetriggering event. Such e-mails may also include information about thenature of the triggering event, the location or banking machine wheresuch event is occurring and other pertinent data. In this way, theentities notified will receive a record of what has or is happening atthe machine. This record will also be available even if the machine iscompromised and rendered inoperative shortly thereafter. Embodiments ofthe invention may also include with such image files, digital watermarksor other indicia of authenticity so that the accuracy of the informationprovided and the images associated therewith have enhanced assurancesthat they have not been tampered with. Further, included in e-mails orattachments thereto may be sound or other files with which images areassociated. This may be accomplished through the programming ofsequences which include the capture of audio or other data in responseto the occurrence of triggering events. Numerous alternative approachesmay be taken utilizing the principles described herein. Of course,embodiments of the system may carry out communication in ways other thanthrough e-mail such as by RF, fax or simulated voice communicationthrough telephone connection.

As previously mentioned, security associated with the image server maybe important to prevent accessing by unauthorized individuals. In theexemplary embodiment password protection is provided to minimize therisk of unauthorized use. Of course in other embodiments other securitytechniques such as public key encryption, encryption of image andtransaction data and digital signatures may also be utilized. FIG. 24shows a screen 294 which is used in an embodiment to establish accessfor particular users. A system administrator is enabled to gain accessto screen 294 and to input information concerning additional users.Screen 294 also enables the system administrator to establish passwordsto be used by each authorized user.

Embodiments may also restrict certain users, or certain categories ofusers, in the type of image data that may be reviewed. This may be donein exemplary embodiments by limiting access to image and/or transactiondata selectively to users, based on the types of triggering eventsassociated with the storage of images. Alternatively, certain users maybe precluded from viewing images captured from certain cameras or otherimage acquisition devices. This capability may be used to preventcertain users from observing certain sensitive image data such as imageswhich may include customer PINs, fingerprint data or the combination toa lock on an ATM. By preventing selected users from accessing certainimage data based on the type of triggering event or camera or deviceassociated therewith, images captured by the system that need not berestricted may be made available more broadly and used for potentiallymore purposes.

A useful aspect of some embodiments is the ability of the system toprovide screens or displays of image and transaction data that can bereadily sorted, viewed and analyzed at user terminals within thenetwork. FIG. 17 discloses a screen or display 296. Display 296 includessets of images 298, 300, 302 and 304. Each image set includes“thumbnails” of five images. Each set corresponds to a transactioncarried out by a particular user and each set of thumbnail images whichcomprises a set, corresponds to images of the particular user duringthat transaction. Of course it should be understood that in situationswhere the timing and sequence programming require a lesser or greaternumber of images, the number of images which comprise a set may differ.In addition as previously discussed, some transactions or triggeringevents may have no corresponding images at all. Other events which donot correspond to ATM transactions may have a large number of imagesspaced closely in time depending on the configuration of the system.This may include full motion or image frequencies approaching fullmotion.

The images which have been captured and stored by the system may bepreferably arranged in one or more series. A series may be a collectionof all stored images arranged chronologically. Alternative series may beproduced by segregating images that correspond to one or more types oftriggering events or transaction parameters. Images included in such aseries may be ordered chronologically, may be ordered in a hierarchy inaccordance with one or more search parameters, or other ordering scheme.A useful aspect of some embodiments is that the user terminal enables auser to scroll through a series of images, displaying one or more of theimages on the display at a time, by selecting certain icons with aninput device. The icons enable the user to selectively display imagesand to move to display one or more different images at points forward orbackward in the series from an image or images currently beingdisplayed. In exemplary embodiments, selection of certain icons causethe display to change and display images in different increments and indifferent directions in the series from one or more images currentlydisplayed.

In an exemplary embodiment screen 296 includes icons 306, 308, 310, 312,314 and 316. The icons may be used to selectively scroll through sets ofimages and images in the sets. As explained with reference to anexemplary help screen 318 shown in FIG. 18, selecting icons 310 and 312enable scrolling backwards and forwards respectively by one event.Selecting icons 308 and 314 enable scrolling backwards and forwardsrespectively by an increment of ten events. Icons 306 and 316 enablescrolling backward and forward respectively to the beginning or end of aseries of events or images.

Exemplary screen 296 also includes “jump to image” and “jump to event”input boxes 320 and 322, respectively. As explained in FIG. 18 boxes 320and 322 may be used to select images that are to be displayed. A “savecomments” box 324 is used to selectively store comments in correlatedrelation with particular images. Comments can be manually input, inputby voice as sound files, input through voice to text conversion softwareor may be generated and stored in response to programmed instructionsbased on parameters and/or triggering events.

Screen 326 shown in FIG. 19 shows a selected image 327 which has beenenlarged by selecting one of the images from the sets. This may be donein the described embodiment by clicking on an image with a mouse orthrough other inputs. As shown in screen 326, the enlarged image 327 isdisplayed with corresponding transaction data which corresponds to theimage. In addition event and image data corresponding to the image isalso displayed. A user reviewing the image data is enabled to review anyof the available image and transaction data.

Advantages of the described embodiments include the ability of a userterminal to access image and transaction data selectively. For examplethrough operation of the browser and/or other programs within the userterminal, an authorized user is enabled to search for selectedparameters such as user name, account number, time and date and otherdata which may be stored in the data store. Image and transaction datamay also be searched by combinations of parameters or ranges ofparameter values. This enables the operator of the user terminal to findselected image data rapidly or more selectively, and without having toscan through large volumes of information. In addition the exemplaryembodiments may enable holding image and transaction data forsubstantially longer periods of time with minimum inconvenience. As aresult this enables such data to be analyzed for much longer timeperiods and potentially much more inexpensively than is currentlypossible.

A further advantage of some embodiments is that image data is readilyaccessible and searchable. This facilitates identification in connectionwith issued documents such as bank checks or value loaded to smart cardsas previously discussed. This enables users having access to the data toverify that a document or other item is being presented by an authorizeduser by accessing and visually or automatically comparing image data.Further advantages and novel aspects will be apparent to those havingskill in the art.

FIG. 28 shows yet another example of a system designated 328. System 328is similar to other systems previously described except as discussedherein. In system 328, image capture and delivery functions areperformed by a separate device 330. Device 330 in this embodimentincludes one or more computers, which are alternatively referred toherein as processors, including one or more servers, and is operative tocapture and store image data, transaction data and other informationfrom devices to which it is connected. Device 330 also includesappropriate interfaces to communicate with the devices to which it isconnected for purposes of receiving inputs and outputs. As schematicallyindicated in FIG. 28, a computer included in device 330 is in operativeconnection with a data store for purposes of storing instructions aswell as image and transaction data. It should be understood that while asingle device for performing the functions is shown in system 328, otherembodiments may include a plurality of operatively connected devicesincluding a plurality of processors and operatively connected datastores as well as other computers and interfaces, to perform thefunctions similar to that of device 330 described herein.

In system 328, device 330 is connected to one or more automated bankingmachines schematically indicated 332. Automated banking machine 332 issimilar to the machines previously discussed and includes a plurality oftransaction function devices. Automated banking machine 332 may have oneor more cameras or other image acquisition devices adjacent thereto asrepresented by camera 334. As will be appreciated, a number of camerasmay be positioned adjacent to the machine by being within and/or near toautomated banking machine 332 for purposes of capturing image datarelated to users, documents, surroundings or other types of visualinputs that may be desirable to capture and analyze. Camera 334 isoperatively connected to device 330 such that device 330 may receive andcapture image data therefrom. It should be understood that additionaltypes of data capture devices may also be included adjacent to or withinautomated banking machine 332. This may include for example microphonesfor capturing sound or voice information as well as devices whichcapture data related to transactions. Some embodiments may use voicerecognition software to detect sounds from the microphone representativeof words or the stress levels of sounds emanating from persons near theautomatic banking machine. Such voice or sound data may be used incombination with images or other data to further detect and evaluateconditions at or near the automated banking machine. The data orinformation which is captured is also communicated to the device 30through one or more appropriate electronic connections schematicallyindicated 336.

In addition to capturing images or other data from one or more automatedbanking machines, system 328 may also be operative to monitor one ormore other transaction devices, as well as to monitor and recordactivities which occur within a facility. One or more camerasrepresented by cameras 338, 340 and 342 are shown and are representativeof cameras used for this purpose. The cameras may be used for capturingimages in response to triggering events, which may be either hard orsoft triggers from one or more types of input devices. Alternatively,the cameras may capture images on an ongoing basis in one or moresequences for purposes of providing a generally continuous record ofoverall activity within an area. As in previous embodiments, thisembodiment also provides the capability of capturing images frommultiple cameras generally simultaneously as well as the capability toboth capture images and be delivering messages or image data from thedevice 330 on a generally simultaneous basis. As will be appreciated,the capabilities of the system may be increased by the addition ofcomponents or enhanced capabilities of the components which comprisedevice 330. This may include, for example, additional interfaces fordigitizing image data received from cameras, additional and fasterinterfaces for input and output devices and increased processingcapabilities and data storage to facilitate enhanced function. Therequired capabilities of device 330 depend on the particular type ofsystem that a user desires to operate and the number and type ofconnected cameras and other devices.

In the exemplary embodiment shown, a number of different types of inputdevices are provided. These input devices provide inputs indicative ofone or more triggering events to device 330. Such triggering eventscause or may affect the manner in which image data is captured by thesystem. Generally the input devices include appropriate interfaces inconnection therewith to enable the device 330 to receive signalsindicative of the triggering event. The exemplary input devices showninclude a cash register 344. Cash register 344 which may also beconsidered a banking machine, is connected to device 330 by acommunications link such as a local network. This enables the device 330to cause images to be captured from a corresponding camera when signalsindicative of transactions are occurring at the cash register. It shouldbe understood that cash register 344 is representative of but one ofnumerous types of devices that may be used in a sales, service provideror banking environment and for which it may be desirable to make arecord of activity occurring adjacent to such devices when activitiesare conducted.

Additional representative input devices include sensors schematicallyindicated 346. Sensors 346 may include sensors for detecting the openingof doors, windows, ventilation ducts or other activities for which it isdesired to capture images. Another exemplary input device includes analarm input 348. The alarm input 348 may be, for example, a device whichis actuated by person to indicate an alarm condition. This may be, forexample, a panic button which is pressed to indicate a hold-up in abanking or other establishment. Alarm input devices may take variousforms and may include sequences input to computer terminals or otherdevices which are connected to device 330.

Sensors used in connection with the systems may include photosensors,infrared sensors, radiation beams or similar detectors. Such detectorsmay be used to sense when a person or item passes or occupies aparticular space or area. For example, a detector may detect when aninvisible beam type sensor is interrupted. Such an invisible beam mayextend, for example, across a counter or bank teller window. As aresult, a signal may be given to capture images in response to eachoccurrence of something passing over the counter or through the tellerwindow. Similarly, such a beam may extend across a cash drawer orsimilar device. Alternatively, such invisible beams may extend in areasknown only to an employee of the facility. This may enable the employeeto give a signal to capture images (and perhaps activate an alarm) whilenot making physical contact with any device. Numerous systems may bedeveloped using these principles.

Other input devices schematically indicated 350, may include otherdevices which detect or receive indications of activity and provideappropriate electrical outputs which can be received by device 330.These may include for example heat sensors, infrared sensors, weightsensing pads, electronic beams or other types of sensors which candetect conditions for which an operator of the system may wish tocapture images or other data.

In this embodiment, the cameras themselves may also serve as inputdevices. The cameras provide inputs which enable the detection ofcertain image conditions. Image conditions may include for example, thedetection of motion within the field of view of the camera. Alternativeimage conditions may include a lack of usable video. This may be forexample a lack of contrast in an image, brightness or darkness beyondselected limits or other images or circumstances such as previouslydiscussed. Alternatively as previously mentioned, image conditions mayinclude the presence within a field of view of persons with particularclothing or features, the presence of persons with certain bodyorientations, the presence of a particular individual based on facialfeatures or other features, the presence of certain objects such asweapons or the presence of particular types of colors or arrangements ofcolors. Numerous types of image conditions which may be determinedthrough analysis of the digital images which are available from thecameras connected to the system may be used as triggering events.

In the embodiment shown, device 330 is also connected to output devices.Exemplary types of output devices shown include an audible and/or visualalarm schematically indicated 352. Such an alarm may give persons in anarea notice of an alarm condition. An alternative form of an outputdevice as shown may include lighting devices schematically represented354. Lighting devices may be turned on for example in response toprogrammed sequences to illuminate an area where an alarm condition isdetected.

Other types of output devices may include blocking mechanismsschematically indicated 356. Blocking mechanisms 356 may operate toblock certain areas to prevent access or escape. Alternatively inresponse to some alarm conditions as set through sequences programmed indevice 330, other alarms may cause blocking mechanisms to open tofacilitate escape of persons from selected areas. Other output devicesinclude, for example, communications devices schematically represented358. Communications devices 358 may include, for example, police alarmsor dial-up devices to notify fire or security agencies of alarmconditions which are detected.

As schematically represented in FIG. 28, device 330 is connected to auser terminal device 360. User terminal 360 may be used for providinginputs from users of the system as well as outputs to users, as laterdiscussed in detail. Device 330 is also shown in connection with anetwork 362. Network 362 like other networks discussed herein, may be acommunications link suitable for communicating, and may be a localnetwork or a plurality of interconnected networks through which device330 is enabled to communicate through an appropriate interface. Remoteterminals 364 and 366 are connected to the network 362. The remoteterminals may be used for providing inputs and outputs to the device330. Such terminals may also be used for purposes of programming andreceiving images from device 330 in ways which are later discussed.Other terminals in the network may be used to hold data which may beused to identify persons, signatures, documents or provide otherfunctions or information as previously discussed.

It should be understood that system 328 is exemplary of many possiblesystem configurations. In one exemplary embodiment, device 330 includesa Diebold AccuTrack™ digital video system which is commerciallyavailable from Diebold, Incorporated, the assignee of the presentinvention. Device 330 operates to provide a helpful user interface forcommunicating with and programming the system. Such communications maybe carried out through the interface at a local terminal such asterminal 360 or remotely from terminals connected to device 330 througha network such as terminals 364 and 366. FIG. 29 shows an exemplaryintroductory screen 368 produced on an output device of a user terminalin connection with device 330. The user terminal, like those previouslydiscussed includes a computer with a browser operating therein, whichcan communicate with device 330. Screen 368 provides a useful interfacefor a user of the system to configure the operation of the system. Italso provides a useful interface with which users may interact torecover and sort images that have been captured by the system as well asto carry out other functions.

Screen 368 as well as other screens presented by the exemplary device330 includes a set of icons and indicators referred to as a tool bar370. As shown in greater detail in FIG. 30, tool bar 370 includes aplurality of icons 372. Icons 372 include a home icon 374, a log-officon 376 and an image search icon 378. Other icons included in the toolbar include a camera check icon 380, a system configuration icon 382, asystem tools icon 384 and a help icon 386. Generally, the icons includean image or representation of an object which suggests to a user thefunction of each. For example, the log-off icon 376 includes arepresentation of a key that can be turned. The exemplary form of thesearch icon 378 is a representation of a pair of binoculars. Similarly,the icon 380 that is selected to conduct a camera check is a visualrepresentation of a camera. Each of the icons 372 and the functions thata user is enabled to accomplish through the selection of each isexplained in greater detail in FIG. 31.

The tool bar 370 includes among icons 372 a status icon referred to as388 in FIG. 30. The status icon 388 indicates to a user the status ofthe system. Several status icons are provided responsive to the thencurrent status of device 330.

The various status icons presented in the exemplary embodiment are shownin FIG. 32. For example, a visual representation of a traffic lightshowing a green light 390 is displayed to indicate that the system isoperating to capture images in the normal manner. A representation of athermometer approaching the top of its range is included in an icon 392.This icon is displayed to indicate that the storage capacity of the datastore within device 330 is reaching its maximum capacity and is notstoring images in the usual manner.

An alternative icon 394 is displayed to indicate that there is a needfor a user to exercise caution as the system is running with errors.Another icon 396 which is a visual representation of a diskette isdisplayed to indicate that input changes to the configuration of thedevice 330 have not been applied. An icon 398 which is a visualrepresentation of a stop sign is displayed to indicate to a user that anapplication error has occurred or that some other problem has happenedsuch that the system is not operating or communicating normally.

In this exemplary embodiment, a user at a terminal is enabled to programor configure operational features of the device 330. Preferably a userwill be enabled to configure many features and operations of the system.This is accomplished in the exemplary embodiment by the user makingselections and inputs from screens or pages in a graphical userinterface through which a user sets up or changes the programming of thesystem. These interface screens and pages are displayed to the userresponsive to selection of icons in the tool bar and through subsequentselections as a user operates the automated banking machine in responseto the interface.

In the exemplary embodiment, one of the aspects of the system that auser is enabled to configure is the period of time that image data andother data including transaction data is stored. In this exemplaryembodiment, the device 330 is configured to store data for at leastcertain programmed periods of time prior to deletion. FIG. 33 shows anexemplary screen 400 which is presented to a user of the system. Screen400 includes image type categories 402. The image type categoriescorrespond to the types of triggering events which caused an image to becaptured. For example, in FIG. 33 the types of images corresponding to“normal” are those images that are captured in response to programmedsequences which are done periodically on a routine basis such as for aperiodic surveillance of an area. Those image types which are capturedin response to alarms correspond for example to images captured inresponse to trigger inputs such as a panic alarm or an intrusion into asecure area within a facility. Other image types correspond totransactions. These may include for example in the exemplary embodimenttransactions conducted at automated banking machine 332 or at cashregister 344. Through inputs in response to screen 400 a user is enabledto input and select which types of images are to be deleted first andlast. The user is also enabled to set up minimum periods during whichimages corresponding to particular image types are to be retained.

FIG. 34 shows an expanded screen 404 which further enables a user toconfigure the auto deletion feature of the invention. Through inputs inresponse to screen 404 a user is enabled to set the unit to accomplishautomatic deletion of images in accordance with the parameters that havebeen input. The user is further enabled to input when the auto deletionactivity is to begin as well as when available disk space is consideredsufficient such that auto deletions should stop. As a result in responseto the user selecting to have auto deletion activity occur, the device330 will operate to selectively begin deleting images in accordance withthe priorities that have been established for the retention of images sothat additional storage space may be made automatically available.

It should be understood that the parameters and deletion capabilitiesshown in connection with screens 400 and 404 are exemplary and otherembodiments of the invention may operate to store image data and deleteit selectively in response to other parameters. In addition, the autodeletion function may be combined or integrated with an automateddownloading function so as to selectively transfer images prior todeletion to another storage area that is connected to device 330. Thismay include, for example, the transfer image and transaction data toother terminals connected in network 362 so that such image data may bestored at a remote location prior to deletion of the image data from thedevice 330. Other approaches and techniques appropriate for systems ofthe invention will be apparent to those skilled in the art from theforegoing description.

Another aspect of the exemplary embodiment that may be configured by anauthorized user is the security applied to various types of images. Inthe exemplary embodiment device 330 allows a user to selectively applyauthenticating algorithms to selected types of images. A screenpresented to a user in the course of configuring the system to establishthis capability is represented 406 in FIG. 35. In response to screen406, a user is enabled to set the system so that digital signatures areapplied to any of several different image types. For example asrepresented in screen 406, a user may elect to include digitalsignatures in images captured in response to triggering events such asalarm conditions, detection of motion or other hard trigger alarms.Likewise as shown in screen 406, the user may configure the system toapply digital signatures into images captured in response totransactions conducted at an automated banking machine. In theparticular example, shown in FIG. 35, digital signatures are not appliedto “normal” images which are those captured in response to routineperiodic sequences. As represented in screen 406, the user may alsoelect to apply digital signal security to no images or all of the imagescaptured in the operation of the system. It should be understood thatthe categories of images shown in screen 406 are exemplary and in otherembodiments other types of image parameters may be used.

A further useful aspect of the exemplary embodiment of device 330 andthe system 328 represented in FIG. 28 is the ability of an authorizeduser of device 330 to program sequences in which images or otherinformation are captured. As is the case in embodiments previouslydiscussed, sequences include a triggering event and a series of actionsthat are taken by the system in response to a triggering event.Triggering events may include, for example, sensing image conditionssuch as motion, lack of usable video or a blocked camera and taking aseries of actions in response thereto such as capturing images fromother cameras, turning on lights, placing in more permanent storagetemporary image data that was captured prior to the triggering event,sending messages such as e-mails or performing other actions. Similarly,triggering events may include activities conducted at an automatedbanking machine or other transaction machine, during which times it isdesirable to capture and permanently retain images from cameras whichhave a field of view that includes the area where the machine ispositioned. Similarly triggering events may include inputs to or fromalarms or sensors. Other triggering events may include sequences whichoperate on a timed or other periodic basis in a routine manner such thatimage data is stored in relatively permanent storage from each of thecameras in the system as a routine matter of course. Numerous types ofsequences can be programmed by an authorized user using the exemplaryembodiment of the invention.

For purposes of the particular exemplary embodiment of system 328,triggering events are cataloged by type as either “normal,” “alarms” or“transactions.” Normal images are those that are captured in accordancewith routine sequences that are carried out on a periodic basis inaccordance with the programming of device 330. Different routinesequences may be operative at different dates and times in accordancewith the system configuration. Such routine sequences may, for example,capture an image from a particular camera so as to store it inrelatively permanent memory every so often, then subsequently capture animage from another camera and so on. Because these “normal” images arecaptured on an ongoing basis, care is generally exercised by theoperator of the system to be sure that not so many images are storedthat the available storage space is occupied too quickly by images thatare of no particular interest.

The images classified as “alarms” are those that correspond to alarmtype inputs. These can include hard trigger alarms such as thoseprovided by switches, invisible beams and buttons that may be tripped asactivities occur. Similarly, the category of “alarms” include imageconditions such as motion detection, loss of usable video, detection ofparticular features, clothing, body orientation, colors or objectswithin the field of view (or a detection area smaller than an overallfield of view) of a particular camera. Each alarm sequence may includeappropriate actions such as actuating lights, blocking devices, alarms,contacting police or fire departments and/or sending e-mail messagesand/or images to predetermined addresses.

In the exemplary embodiment, images associated with “transactions” areimages associated with devices at which transactions are carried out.These may include transactions conducted at automated banking machine332, cash register 344 or other devices where it is desirable to make arecord of the transactions. With regard to transaction images thesequence typically involves a triggering event related to operation of acomponent of a transaction function device or terminal, and the actionsmay include capturing the image to store it in memory and perhapsadditional steps depending on the nature of the transaction beingconducted. Again, it should be remembered that the categories oftriggering events in this embodiment are exemplary and other triggeringevent categories may be used in embodiments of the invention.

In the exemplary embodiment, device 330 operates in a manner like thatpreviously discussed to digitize image data received from all or aselection of cameras on an ongoing basis. This image data is digitizedas image frames on an ongoing basis and remains stored in the memoryassociated with the computer of device 330 for a fairly limited periodof time. These temporarily captured and stored images may be morepermanently captured by being moved to relatively permanent storage atthe time that they are received or alternatively may be moved intorelatively permanent storage at any time prior to their deletion. Thevalue in digitizing and temporarily capturing images on an ongoing basisas often as possible from selected cameras include the ability torecover image data from a time prior to a triggering event. Thus forexample if an image condition such as a blocked camera is detected, oneor more prior images from the same camera that are still in temporarystorage may be transferred in response to the triggering event to morepermanent storage and correlated with data representing the triggeringevent. This may enable detection of an image which includes a person whocaused a camera to be blocked. The ability to retain on a more permanentbasis images which occurred prior to a triggering event is configurablein the exemplary system, as are the number of images prior to thetriggering event which may be transferred to more permanent storage. Ofcourse the ability to transfer prior images depends on the number ofimage frames that are available in temporary computer storage from eachcamera prior to the deletion of such images. Of course the duration thatsuch temporary images are stored can be increased with the addition ofadditional storage and processing capability. Likewise, the frequency ofthese temporary images from any given camera depends on the processingcapabilities of the computer operating in device 330. Faster processingmay similarly increase the frequency at which temporary images arecaptured.

A useful aspect of the exemplary embodiment includes the ability toprogram sequences using descriptive terminology which is established bya user of the system. FIG. 36 shows a screen 408 that is displayed to auser in configuring system 328. Screen 408 is a camera set-up screen inwhich a user is enabled to give descriptive names to the particularcameras or field of view of a camera connected to the system. Fromscreen 408, a user is enabled to select a camera through use of an inputdevice such as a mouse and to “see” the field of view that is associatedtherewith. The user is also enabled to input a descriptive name for thatfield of view such as is shown in connection with “camera 01” shown inFIG. 36. As subsequently explained in detail, a user is enabled toconfigure sequences including triggering events and actions to be takenin response thereto using the descriptive names that the user has givento various cameras in the system. This capability greatly simplifies theprogramming of the system as users are not required to learn any specialconventions or terminology.

As is the case with cameras, users are also enabled to apply descriptivenames to outputs which are provided from the device 330. These outputsmay include for example a descriptive name for the particular item oraction which is triggered by the output. For example, in FIG. 37 thereis shown a screen 410 in which an authorized user of the system ispresented with output numbers for the various contacts and connectionsthat may be made to device 330. By making an appropriate selection andinput, the user is enabled to apply descriptive terminology to theseoutputs. For example, in screen 410 “output 01” has been named toindicate that it operates to turn on lights in a vestibule. Of coursethis is exemplary and any appropriate name may be input in thediscretion of the operator.

Similarly, the user of the system is enabled to provide descriptivenames for the inputs which serve as triggers for executing sequences bydevice 330. Screen 412 in FIG. 38 shows the capability of a user to givea descriptive name to a particular input device. For example, in FIG. 38“input 01” to device 330 is indicated as associated with a teller panicbutton. Having this descriptive information available and usable toprogram sequences in the invention makes it much easier for a user toset up and check that the desired activity is happening in response to atriggering event in any given sequence.

FIG. 39 also shows the capability of device 330 to execute sequencesthat are triggered by operation of automated banking machine 332. Ascreen 414 in FIG. 39 shows an ATM monitoring set-up screen. In responseto the presentation of screen 414, a user is enabled to give theautomated banking machine a particular descriptive name. Thisdescriptive name may include the particular street address where theautomated banking machine is located. Similarly, if there are severalautomated banking machines at the same address, each machine may beassigned a descriptive name representative of its location. Such termsused may include names such as “lobby ATM,” “drive-through ATM” and“walk-up vestibule ATM.” Of course many other types of names anddesignations may be used depending on the particular type of automatedbanking machine involved.

In the exemplary embodiment of screen 414 shown in FIG. 39, the system330 is shown configured to operate in connection with an ExpressBus™interface which is used in automated teller machines manufactured byDiebold, Incorporated, the assignee of the present invention. Of coursein other embodiments of the invention other appropriate set-up screenssuitable for configuring the programming of the system to work withother types of machines may be presented.

As was discussed in connection with other embodiments, actions performedas part of a sequence may include sending e-mails to one or severalpersons notifying them of the occurrence of the triggering event. Screen416 shown in FIG. 40 may be used by an authorized user of the system toinput e-mail addresses that are to be notified of triggering events.Further as represented in screen 416, a user is able to designate groupsof persons who are to be notified of particular events. Thesedescriptive names for groups enable an authorized user to readilyconfigure the system so that a number of people receive an e-mailmessage notifying them of a triggering event. Such actions are readilyprogrammed into a sequence by referring to the name of the group.

Screen 418 shown in FIG. 41 shows an example of an e-mail group whichhas been named “security.” This would be, for example, a group ofpersons or entities that are to be notified in the event that atriggering event detected by the system indicates a breach of securityor some activity that should be investigated by a security organizationresponsible for the facility. As can be appreciated by screen 418, anauthorized user of device 330 is enabled to add, delete and edit e-mailaddresses which compromise the groups which are to be notified.

In some exemplary embodiments where images corresponding to documentsare captured by an automated banking machine, the system may operate todeliver images of documents accepted by the machine to authorizedpersons. This may include for example delivering e-mail messages whichinclude or have attached thereto data corresponding to an image of adocument. For example in some embodiments e-mail address data may beresolved by an automated banking machine based on routing numbers orother data or indicia included on checks or other instruments presentedto an automated banking machine. Based on programmed instructions in themachine such data may be utilized to resolve the appropriate e-mailaddress associated with the maker of the document. In this way the makerof the document may be advised that the particular document has beencashed. Further, as previously discussed in exemplary embodiments amaker of an instrument so notified may also access and/or transfer datacorresponding to at least one image associated with the individualpresenting the document to the machine. This may enable greaterassurance that the particular document has been presented or cashed byan authorized person. Likewise some embodiments may provide e-mailnotifications and/or image data when a document has been deposited forthe benefit of a user. Such approaches enable the persons involved tomanage their account balances more closely and in some exemplaryembodiments to reduce the risk of fraudulent or inappropriateactivities.

The exemplary embodiment of device 330 enables an authorized user toreadily program the system to carry out various types of sequences.These sequences include sequences associated with the capture of“normal” or routine images that are stored on a timed or other periodicbasis while the system is operating. The user is also enabled to programsequences in response to the various types of triggering events such asinputs, motion detection, lack of usable video and the conduct oftransactions. FIG. 42 shows a screen 420 which is presented to a user inconnection with establishing routine sequences for the capture of imagesand storage on a relatively permanent basis. Screen 420 also shows thebeginning point for the programming of sequences in response to inputdevices which will be later discussed in detail.

In response to user selection of the “daily program” box in screen 420 ascreen 422 shown in FIG. 3 is presented. Screen 422 shows a visualrepresentation of a weekly layout for hours in each day and the names ofprograms or sequences which are operated to capture routine or “normal”images during the indicated times. In addition to viewing the sequencesthat are operative at various times during the week from screen 422, theuser is enabled to view the sequences applicable during any selected dayof the week or in groups of days such as by weekdays or weekends. In theexemplary programming of the system, sequences are configured tocontinue until a time when another sequence is to be initiated. Further,the programming is set up so that a more specific program for a giventime period will override a more general program during the selectedperiod.

By selecting a particular day of the week from screen 422, the exemplaryembodiment of device 330 is operative to display to a user a screen 424shown in FIG. 44. This screen shows for the selected day the sequencesfor the routine capture of images that occur on that day and the timeperiods when each sequence starts and ends. A graphical indication isalso provided so that the user may readily see the times during theselected day when particular sequences are operative.

From screen 424, a user is enabled to select to view any of the selectedsequences. For example, by selecting to view sequence indicated “1” inscreen 424 the device 330 causes the screen 426 shown in FIG. 45 to bedisplayed. Screen 426 indicates to the user a graphical representationof the steps involved in the routine sequence. Screen 426 also indicatesthe data compression level that is to be applied to the images that arecaptured and stored on a relatively permanent basis. By selecting thecompression level the user may choose to have lower quality images inexchange for utilizing less of the available data storage space withimages corresponding to the particular sequence. Various levels of datacompression are selectable by the user for the sequence as shown inscreen 426.

As represented in screen 426, the user is also enabled to set an imagecapture rate which controls the frequency of image capture and storageduring time periods which are indicated in the sequence as periodsduring which images are to be captured by a particular camera. In theexemplary embodiment, the user has the option to capture a certainnumber of images or to set the system to capture images for a period oftime. If the user configures the system to capture images based on time,the indicated rate reflects the number of images captured and stored inrelatively permanent memory during each second. The exemplary embodimentalso enables a user to select AVI which is an image capture ratesufficiently high such that it appears to capture full continuous motionin a manner similar to a video clip. In the exemplary embodiment thecapture of ten or more images each second corresponds to what generallyappears to a user to be full motion. Of course, higher rates of imagecapture may be used.

Screen 426 represents the sequence which is carried out routinely by thesystem on an ongoing basis using the passage of time as the triggeringevent for each sequence. As can be seen, the particular cameras in theexemplary sequence are shown by the numbers as well as the descriptivenames which have been applied by a user thereto. In this exemplarysequence, a camera which views a front door takes one image every secondfor three seconds. Thereafter, a camera which takes pictures of anoutside ATM takes one image every second for three seconds. After that,a camera which views the back door takes one image every second forthree seconds. After completing the sequence, the sequence repeats. Anauthorized user is enabled to modify the sequence by changing the numberand timing of images in the sequence. The user is also enabled to deleteand modify steps in the sequence by selecting the “buttons” at thebottom of screen 426. For example, a user is enabled to selectively orcompletely delete steps in the sequence, add cameras, add steps and savethe revised sequence. Of course in other embodiments additional optionsfor steps or actions in sequences may be provided.

In the exemplary embodiment of the routine sequences, provisions are notmade for notifying a remote location via e-mail. This is because routinesequences are continuously executed gathering and storing images at alltimes while the system is operating. This includes times in which imagesare being captured in response to other events. In other embodimentshowever, the system could include as part of the capture of normalimages, provisions for providing periodic reports via e-mail orotherwise, to functions or individuals who need to know that the systemis operating normally. In addition, such messages may also include oneor more images enabling the person receiving the message to visuallyverify the current condition in the area or facility monitored by thesystem.

FIG. 46 shows a screen 428 at which a user is enabled to reviewsequences associated with inputs that correspond to triggering events.Such triggering events may include, for example, the inputs from varioussensors sensing activity in various areas under surveillance, inputsfrom panic buttons or other types of inputs. By providing inputs inresponse to screen 428 an authorized user is enabled to selectivelyenable execution of the sequences in response to the triggering eventswhich cause the listed inputs.

By providing inputs to screen 428 a user is enabled to configure thesequences associated with particular inputs. This includes establishinga schedule during which a selected input will cause a selected sequenceto be executed. The schedule for the execution of a particular sequenceis shown in screen 430 in FIG. 47. Through inputs to screen 430, theuser is enabled to indicate the time periods during which the systemwill execute the sequence if the input is received. For example, if theparticular input is associated with opening a door, it may not bedesirable to capture images during the time periods when the door isfrequently opened by employees or customers who access a facility. Theconfiguration associated with the input enables the input to cause theexecution of the sequence only at the times when the capture of imagesis likely to yield useful information. In the exemplary screen 430 shownin FIG. 47 an input number 2 is configured to cause its correspondingsequence to be executed only between 9 a.m. and 4 p.m. Through inputs toscreen 430, an authorized user is enabled to modify these time periodsas well as to select separate discrete times periods during which theinput will cause the sequence to be executed.

The user is also enabled to set up or modify the sequence that isassociated with the input. This is accomplished from screen 430 by anappropriate input that causes the screen 432 shown in FIG. 48 to bedisplayed. Screen 432 includes a description of the particular eventwhich is associated with the input. Also as is the case with the routinesequences previously discussed, a user is enabled to set the imagequality of the images captured and stored in response to the triggeringevent. Further in the exemplary embodiment, an authorized user isenabled to set the number of times that the sequence will be executed inresponse to the triggering event. As previously discussed screen 42 alsoincludes provisions for the user to set the image capture rateassociated with the capture of images that are done in the correspondingsequence on a timed basis.

The user is enabled to set up a sequence by selecting the “buttons” atthe bottom of screen 432. These buttons correspond to various actionsrelated to cameras, outputs and e-mails that the system is enabled tocapture images from, provide and send, respectively. In response toselecting one of these buttons, a particular configuration step oraction which a user may populate with instructions by making selectionstherein is included in the sequence. For example, in response toselecting a “camera” button a sequence frame designated 434 in screen432 is displayed. The sequence frame includes five areas for inputs thatcan be provided by the user. This includes the camera selection, thenumber of images, the frequency of the images and the duration or numberof images involved. By populating these five spaces in the image framewith data the user is enabled to provide the necessary programminginformation for carrying out an action in a manner that is readilyunderstood in a sentence format. For example, as shown in screen 432,sequence frame 434 indicates that the camera designated “drive-thru #2”takes one image every one second for two seconds. Of course by makingselections and inputs the user is enabled to change the five input areaswithin the sequence frame to suit their particular requirements.

Similarly, as represented in screen 432 selection of the “output” buttonenables a user to include a sequence frame 436 in an action thesequence. The sequence frame includes three inputs that can be made by auser to select the nature of the output that is to be included as anaction in the sequence. In the case of sequence frame 436 the user isshown as having populated the information for causing the “W station # 2light” to turn on for ten seconds. Thus again the sequence frame enablesthe user to provide in a sentence format those instructions whichcorrespond to a selected output. Further the outputs are enabled to beselected in accordance with the descriptive names that have been appliedto the outputs by a user.

As can be appreciated from screen 432 numerous action steps can beselectively added or deleted from a given sequence as desired by theuser in response to the triggering event. It should further beunderstood that similar sequence frames are provided for e-mails whichis a selected action step that can be taken in response to a triggeringevent. Further in other embodiments additional types of steps can betaken, each of which may have its own sequence frame which a user maypopulate with particular data to accomplish the carrying out of aparticular action step. For example, additional actions may includerepeating one or more steps in a sequence one or more times, and waitingfor other actions or delaying for a time before taking further actions.Similar principles are carried out in connection with the programming ofthe various types of sequences by the system of the exemplaryembodiment.

FIG. 49 shows a screen 438 which is associated with establishing asequence in response to the detection of motion in the exemplary system.The motion set-up sequences enable a user to establish when detectedmotion within a particular area causes images to be captured and storedon a relatively permanent basis, and other actions to be taken as partof a sequence.

In screen 438, the cameras which are included in the system arepresented using the descriptive naming terminology applied by a user. Inresponse to the motion set-up screen 428 a user is enabled to selectwhich sequences are enabled or disabled for particular cameras. Inaddition a user is enabled to access other screens for purposes ofsetting up selected detection areas in which motion is to be detected,as well as to configure the sequences that are executed in response tomotion detection.

In response to selecting a set-up button for an appropriate camera fromscreen 438, a set-up screen showing a field of view currently obtainedfrom the camera selected is displayed at the user terminal. An exampleof such a set-up screen is indicated for 440 in FIG. 50.

Screen 440 includes a field of view of the designated camera generallyindicated 442. The field of view of the camera includes the entire imagefield that the camera is currently viewing. Through use of a mouse orother input device, a user is selectively enabled to select one or moredetection areas schematically indicated 444 within the field of view442. The detection areas 444 are one or more areas to be analyzed and inwhich a determination concerning the detection of motion is to be made.An advantage of providing a selected detection area for purposes ofdetermining the presence of motion is that it avoids problems associatedwith monitoring in areas where motion may commonly be occurring in someareas, but where in other areas the occurrence of motion is an event forwhich images should be captured. In the exemplary embodiment the systemis operative to compare the images only within the selected detectionareas on an ongoing basis between the temporary captured images that arestored temporarily from each of the cameras. Comparison of the image inone or more successive ones of these temporary images are preferablyanalyzed through operation of the computer for differences. In thisembodiment the computer operates to analyze the pixels which make upthese images for a degree of change. If more than a set degree of changebetween one or more of these images which are spaced in time isdetected, this is an image condition indicative and motion and atriggering event which causes the corresponding sequence to be executed.

An advantage of the exemplary embodiment shown in connection with screen440 is that the user is enabled to selectively set the degree of changein the image in the detection area which will result in a determinationthat motion has been sensed. Specifically in the exemplary embodimentthe user is enabled to selectively input values as to a percent ofsensitivity which corresponds to a change in property such as intensityor color (or a combination of both) among pixels in the detection areathat will be considered for purposes of determining whether motion hasoccurred. Likewise the user is enabled to set the percent of activitywhich corresponds to a quantity such as a number or percentage of pixelssubject to analysis experiencing the set change in intensity orsensitivity which is indicative of motion. In this way the user of thesystem is enabled to set the motion detection parameters for the degreeof change which will cause a triggering event indicative of motiondetection. A user may thereby avoid motion from being considereddetected in circumstances where it is not desirable to capture images.

An exemplary embodiment includes a service program which enables aservicer or authorized user to test the suitability of the motiondetection settings in particular circumstances. This program runs in oneor more computers operatively connected to the camera of interest. Theuser inputs into the computer running the program the selectedsensitivity and activity settings. The user may then cause activity tooccur in the field of view of the camera. The program then causes adisplay to operate so as to indicate whether the activity resulted inmotion being considered to have been detected. In this way a user mayadjust the settings to suit their requirements. Alternatively the systemmay be operated in a test mode to capture a series of images from aselected camera. The settings may be applied by a test program to thesecaptured images in a controlled manner to evaluate the settings versusthe nature of image change. In an exemplary embodiment, captured imagesmay be compared in the sequence originally captured or may be comparedin a different sequence to determine the appropriate motion detectionsettings. Once selected, the selected settings for sensitivity andactivity may be set in the system and applied on an ongoing basis.

Returning to the discussion of FIG. 50, from screen 440 a user isenabled to display a schedule for selected days in which motion is to bedetected. This is represented in screen 446 which is shown in FIG. 51.Through inputs responsive to screen 446 the user is enabled to set theperiods during which motion detection is accomplished for purposes ofcarrying out a sequence. As can be appreciated in many circumstancesthere are particular times of day during which motion is likely to begoing on in a particular area and other times during which the detectionof motion may represent an usual event for which images should becaptured. Through inputs of screen 446 an authorized user is enabled toselectively set the times during which motion detection analysis will beconducted.

From screen 446 a user is enabled to set the sequence that is carriedout in response to a motion detection event. This is done in response toa screen 448 shown in FIG. 52. Screen 448 includes the ability of a userto set the parameters associated with the detection of motion using thedescriptive names for cameras which were set-up by the user. The user isalso enabled to set the image quality parameters for the storage ofimages. In addition to parameters associated with other screens, inscreen 448 the user is also enabled to set the number of images capturedprior to the detection of motion which will be moved from temporarystorage into relatively permanent storage in connection with imagescaptured in response to the motion event. Using inputs directed to the“buttons” in screen 448, the user is also enabled to set up the sequenceframes associated with cameras, outputs and e-mails by populating theinformation in the frame. A sequence frame enables the user to programusing a sentence type structure, the actions which will occur inresponse to the triggering event. For example, in the sequence shown in448 in response to motion being detected at the camera which watches theback door of a particular facility, the back door camera takes twoimages every second for sixty seconds. Thereafter the outside back lightturns on for five seconds. In addition to capturing the images from theback door camera, two pre-alarm images are transferred, from temporarystorage into relatively permanent storage with data which describes thetriggering event. Of course, it should be understood that the sequenceparameters and actions are exemplary and in other embodiments otherapproaches may be used.

Embodiments may also capture images in response to triggering eventswhich are indicative of cameras being blocked. Such blocked cameraevents which are alternatively referred to herein as a lack of usablevideo, generally result from an image condition in which the imagepresented is either unduly light or dark, or otherwise lacking incontrast, not changing or otherwise appearing so as to suggest thatusable video data is not being received. The sequence as associated withblocked cameras is configured in the exemplary embodiment with inputsresponsive to a screen 450 shown in FIG. 53. In response to presentationof the screen 450 a user is enabled to select the particular camera atwhich a blocked camera event will be detected.

In response to the user selecting a camera in response to screen 450,the exemplary embodiment displays a screen 452 shown in FIG. 54. Throughselections made in response to the presentation of screen 452 the useris enabled to set the blocked camera capability as either operative orinoperative. The user is also enabled to set up the criteria used foridentifying a blocked camera as a triggering event and to configure thesequence that will be executed in response to the blocked camera event.

In response to a user selecting the set-up button from screen 452, theexemplary embodiment is operative to display a screen 454 shown in FIG.55. In screen 454 the user is enabled to set a brightness intensity(which may represent a color level tending toward white) as well as adarkness intensity (which may represent a color tending toward black).In this exemplary embodiment if the pixels which make up the field ofview of a selected camera average above the selected brightnessintensity, or alternatively average below the selected darknessintensity, a triggering event indicative of lack of usable video isinitiated. Alternative embodiments may look for every pixel being aboveor below certain thresholds. Alternatively in other embodiments thepixels which make up the field of view are analyzed by the computer onan ongoing basis for color level or contrast with pixels in other areasof the field of view. A failure of the image to have contrast above aset level for the overall field of view may in addition represent atriggering event indicative of lack of usable video. Of course, aspreviously discussed, other criteria may also be used for deciding thatthere is a lack of usable video.

Screen 456 shown in FIG. 56 is presented to a user in the exemplaryembodiment to set a time period during which the sequence will becarried out if a camera is blocked. The user is enabled to set theinputs for those times of day during which a blocked camera event willbe considered a triggering event for the sequence to be carried out.

Screen 458 shown in FIG. 57 is displayed in the exemplary embodiment toa user to configure the sequence that is executed in response to ablocked camera event. As in the other sequence configuration screens ofthe exemplary embodiment, a user is enabled to set the quality of theimage data that is captured in response to the triggering event. Furtherthe selection of “buttons” in the lower portion of the screen 458 causessequence frames to be displayed which the user is enabled to arrange andpopulate with data to configure the sequence. As shown in FIG. 58 thesequence frame 460 associated with sending e-mails is displayed. Thissequence frame enables a user to input data identifying persons orgroups of persons to which e-mails are to be sent. The ability to usethe descriptive naming terminology defined by the user simplifies theprogramming of the sequences in the exemplary embodiment. Further asshown in screen 458 the user is enabled to employ other sequence framessuch as sequence frame 462 which is associated with a camera. Bypopulating the inputs for the camera sequence frame the user creates asequence which is carried out in response to the indicated camera beingblocked. The exemplary sequence includes sending an e-mail to the e-mailgroup that is designated “security.” In addition to sending the e-mail,camera #2 is operated by the computer to capture and store two imagesevery second for twenty seconds. Of course it should be understood thatcamera number two is a camera which preferably includes in its field ofview the camera that is indicated as blocked. Of course as previouslyexplained in other embodiments, the programming for lack of usable videomay also include the retention in more permanent memory of temporaryimages which were taken by the blocked camera prior to the lack ofusable video being detected. Such images may indicate the cause of thelack of usable video. Of course other approaches may be used in otherembodiments.

In the exemplary embodiment device 330 is also configured to executesequences in response to triggering events such as transaction stepswhich occur at an automated banking machine such as ATM 332 or cashregister 344. In the exemplary embodiment sequences are configured toacquire images in response to the operation of transaction functiondevices. The images are stored in connection with transaction dataregarding the transaction that is conducted at the machine. FIG. 58shows an exemplary screen 464 which is displayed to an authorized userby device 330 in connection with configuring sequences responsive to theoperation of an automated banking machine. Through inputs in response toscreen 464 a user is enabled to set up and configure the sequencesassociated with operation of the machine.

In the exemplary embodiment inputs responsive to screen 464 enable theuser to set up the acquisition of images from particular automatedbanking machines. This is done through inputs to the user terminal inresponse to a screen such as screen 414 shown in FIG. 39. Further fromscreen 464 a user is enabled to configure the parameters for theacquisition of images in connection with particular events carried outat the ATM. This is accomplished in the exemplary embodiments throughinputs through a screen 466 shown in FIG. 59. Screen 466 enables a userto select triggering events for the capture of images. For example inthe exemplary screen shown, the triggering events include the reading ofa user's card and the printing of a receipt. The user is also enabled toconfigure the system to set the quality of the images stored based onthe level of data compression used. Further as represented in screen466, the user is also enabled to set sequences which include sequenceframes for cameras, outputs and e-mails responsive to triggering eventswhich occur in the course of a transaction. For example in exemplaryembodiments the system may capture one or more images of a customeroperating the banking machine so as to provide verification at a laterdate as to the identity of the particular person who has operated themachine to carry out the transaction. The number and character of imagesmay be varied depending on transaction parameters including thetransaction type, the time of day, the amount of money involved or otherparameters associated with the user.

In the exemplary embodiment, transaction data is also stored incorrelated relation with the captured image data. The image data iscorrelated with the transaction data by the particular time at which thetransaction is conducted. Of course in other embodiments otherapproaches to correlating image and transaction data may be used.Alternatively, image and transaction data may be stored together incommon files depending on the requirements of the system. Generally, inthe case of a system monitoring an automated banking machine, thetransaction data that is stored will often include parameters such astime, user name, account number, transaction type and amount. Thestorage of these parameters in connection with the images enable theselective sorting of images by transaction parameters. This enables anoperator of the system to more readily recover types or ranges oftransactions that may be of interest. In addition, it facilitates theselective retention or deletion of transactions in some embodiments byfactors such as the transaction type and/or amount. Of course, in otherembodiments other approaches may be used.

It should be understood that although in the exemplary embodiment imagecapture from an automated banking machine is conducted responsive tosignals sent to transaction function devices on the system bus of theATM, in other embodiments other triggering events may be used. Forexample, in some embodiments the presence of a user adjacent to atransaction terminal may be sensed with a proximity sensor such as anultrasonic detector or a weight sensing pad. Alternatively, automatedbanking machines may provide hard sensor inputs such as are obtainedwhen a user receives cash from a cash receipt dispenser, or anotherdevice on the machine is moved. Such inputs may be configured as inputsto device 330 much in the manner of sensors 346. Such inputs may be usedfor purposes of configuring sequences in response to such inputs. Forexample a screen 468 shown in FIG. 60 represents an example where aninput from a sensor is used as the basis for configuring a sequence.Such an input may correspond to the operation of the device on anautomated banking machine or other transaction terminal. Through inputsresponsive to screen 468 a user is enabled to configure a sequenceincluding capturing images from cameras, providing outputs or sendinge-mails in response to such inputs. Of course, numerous otheralternatives for accomplishing similar functions may be used.

As previously discussed, a useful aspect of some embodiments is theability to conduct searches for images that have been stored. Searchesmay be made based on one or more parameters. Image searching isaccomplished responsive to selecting the icon 378 in the tool bar 370displayed on numerous screens in the exemplary embodiment. A screen 470shown in FIG. 61 is used for obtaining user inputs concerning exemplaryparameters that are employed in the searching of images. As can be seenin screen 470 a user is enabled to select time periods during whichimages are to be searched. The user is also enabled to select cameraswhich captured the image data which will be searched. The user isenabled to select all cameras or particular cameras which are to besearched. Alternatively, a user is enabled to select a “quick vieweroption” which enables a user to scan through images in a manner that islater described.

Screen 470 also enables a user to select parameters for identifyingimages. These include for example selecting among images captured inresponse to particular alarm types as well as images captured inresponse to particular transaction types. In this way a user is enabledto selectively search the images for a number of different parameters.Other embodiments may be operative to search for data or other featuresin imaged documents. The ability to search by various parameters greatlyreduces the effort required to identify images that may fit a user'ssearch criteria.

As explained in connection with other embodiments, image data may inaddition be searched by visual characteristics. These may include forexample searches for physical characteristics of persons shown in theimages. Similarly searches may be made for certain types of apparel,certain colors or certain devices or items. The capability of someembodiments of the present invention may enable identifying particularpersons or situations for which available data is otherwise incomplete.This may include for example identifying witnesses or other personspresent when particular circumstances have arisen. Of course numerousdifferent types of criteria and parameters may be used in searching forselected images.

A further aspect of the exemplary embodiment represented in screen 470is the ability to also group images by the particular type of eventwhich has caused the images to be captured. This provides thecapabilities of allowing a person reviewing images to catalogue andreview images by the triggering event which caused them to be capturedtogether. This may provide a user with additional insights as toparticular events. It may also enable a user to search an event type ofmost interest first before moving onto other images which meet searchcriteria.

In response to the conduct of searches, various image pages aredisplayed by the device 330. Examples of image pages are shown in FIGS.62 through 72. Each of these image pages shows one or more images thathave been captured and stored, and which are displayed in response tosearch requests. The nature of each of the image pages and how they areused in the exemplary embodiment are explained in detail in the chartsshown in FIGS. 73 and 74. Of course it should be understood that inother embodiments other image pages may be used.

It should be noted that in the exemplary embodiment, a control panelschematically indicated 472 is displayed in connection with image pages.A control panel 472 enables a user to perform various functions toreview images, as well as to download images from device 330 to otherterminals in the system with a greater degree of assurance that theimages have not been tampered with. It should also be noted that inimage pages of the exemplary embodiment a graphical representation of apiece of movie film is included to represent to a user that a series ofimages were acquired at high frequency in response to an event so as toacquire a film clip that approximates full motion video.

A further aspect of some embodiments that is useful is the ability ofthe system to indicate that a plurality of images have been captured inresponse to certain triggering events. This is indicated by the imagesets as represented for example in FIGS. 64 and 65. Further asrepresented for example in FIGS. 67 through 70, particular images may beselected for enlargement for review by a user with informationconcerning the nature of the triggering event which resulted in thecapture of the image. A listing of the data which is included withtriggering events and which can be recovered by an authorized user ofthe system is listed in the chart in FIG. 75. A further useful featureof the exemplary embodiment is the capability of a user to providecomments concerning particular images. Such comments may be input fromthe user terminal via typed input in text form. In alternativeembodiments, a user may input comments by voice to text conversion inputas well as to have comments stored as a voice file. Such comments may beuseful later in recovering images when searching by particular commentcriteria. The computer may itself be programmed to add comments toparticular fields in connection with images depending on the programmingof the system.

The control panel 472 used in the exemplary embodiment is shown ingreater detail in FIGS. 76 through 80. The control panel 472 includes aplurality of icons and indicators as well as an image counter which isshown in FIG. 77. The function executed in response to selection of eachof the icons in the control panel when particular image pages are beingdisplayed is shown in detail in FIGS. 78 through 80. As will beunderstood from the detailed description, the control panel 472 enablesa user to navigate through images in a rapid and selective manner. Theuser is also enabled to navigate through a series of images sequentiallyin varied increments and directions within the series of selected ordisplayed images. Further as represented in FIG. 80, the user is enabledto provide inputs to the control panel so as to identify images capturedwithin certain time parameters. It should be understood that in someembodiments the series of images may be considered to be onedimensional. However in other embodiments the images may be arranged ina matrix or other multilayer or multidimension format based on variedparameters. By making selections and inputs users may navigate in varieddirections in the series of images.

FIGS. 81 through 83 show numerical examples of the capability of thecontrol panel 472 in enabling a user to navigate through a series ofimages which are displayed to a user. As represented graphically in eachof these figures the selection by the user enables the user to find animage of interest to enlarge it, mark it and to print those images whichare of interest.

A further useful aspect of some exemplary embodiments is the ability ofa user to identify selected images for downloading from device 330 toanother terminal which is connected thereto. Such downloading may beaccomplished in a manner which provides greater assurance that thedownloaded images are not altered. This is accomplished in the exemplaryembodiment using a feature which is referred to as an image cart. Inreviewing images, a user is enabled to click on a rectangular iconadjacent to images so as to change the color thereof. As represented inFIG. 84 these rectangular icons change color responsive to selection soas to place the images in the image cart. The positioning of these iconsrelative to images can be seen for example in displayed imagesrepresented in FIGS. 62 through 64. When scrolling through the imagesusing the control panel 472 the user is selectively enabled to click onthose images that they find of interest for purposes of downloading bychanging the color of the image cart symbol 474 adjacent to the image ofinterest. As explained in FIG. 78 a viewer icon 476 may be selected atany time on the control panel to enable a user to quickly view thoseimages that they have included in the image cart.

A further useful aspect of some exemplary embodiments is the ability totransfer the images in the image cart from the device 330 in a mannerthat provides greater assurance that the images have not been subject totampering. In the exemplary embodiment a user is enabled to downloadimages using the image cart feature to a terminal. However device 330 isprogrammed so as to include in connection with such images a warning toindicate to the viewer thereof that the image was not secure and may besubject to tampering. Given the ability of current computer equipment todo image modification and manipulation, this feature assures that imageswhich are downloaded without security give any user thereof fair noticethat the image may not be as originally captured. This notice ispreferably sent with the downloaded image when the data correspondingthereto is transferred to the user terminal and the image is output on adisplay thereof.

The image cart feature however enables the application of a digitalsignature with images downloaded in the image cart along with theassociated data. This security feature is attained by selecting a keyicon 477 in the control panel as shown in FIG. 78. In response toselection of the key icon 477 a user downloading images is presentedwith a screen of the type shown in FIG. 85. The screen advises the userthat the images are being downloaded as a secure file to assureintegrity. In addition the user is provided with a password which mustbe input to unlock the package of image and transaction data which hasbeen secured with the digital signature. In the exemplary embodiment,the images are also downloaded with an encryption scheme which isintegrated with the digital signature technique to assure that only theauthorized user may access such images. Of course it should beunderstood that this technique is exemplary and in other embodimentsother approaches to encrypting the data as well as techniques forreducing the risk that images have not been subject to tampering may beused.

Still other exemplary embodiments may be used in connection withmonitoring facilities and users. FIG. 86 shows exemplary components thatmay be included in such a system.

A facility 490 such as a bank facility includes an ATM 492 which may beof a type previously discussed. The facility 490 also includes a vaultor other valuables holding area 494. The facility includes an interiorarea 496 which is accessed through an entrance 498.

The facility 490 includes a plurality of cameras 500. In the exemplaryembodiment the cameras have fields of view that include areas adjacentto the ATM, the vault, as well as other portions of the interior area ofthe facility. Other cameras of the exemplary embodiment include fieldsof view that includes an entrance area adjacent the entrance. In theexemplary embodiment cameras 500 have fields of view that includes areasboth external and internal of a facility. Of course in other embodimentsother approaches may be used.

The cameras 500 are in operative connection with at least one computer502 which is alternatively referred to herein as a processor. At leastone input device schematically indicated 504 is in operative connectionwith the computer 502. The computer 502 includes a suitable interface orother communications device that enables the computer to operativelycommunicate through at least one network schematically indicated 506. Asrepresented schematically in FIG. 86 the at least one network 506 may bein operative communication with a plurality of other facilities 508, 510and 512. Of course these facilities are exemplary and a large number offacilities may be in connection with the network. These other facilitiesmay include other bank facilities in some embodiments. In otherembodiments the other facilities may include retail establishments,distribution facilities, manufacturing facilities, residentialfacilities or other types of facilities that may be used in connectionwith various embodiments. It should also be understood that although asingle network 506 is schematically represented, the facilities may bein communication in systems of various embodiments through a pluralityof different networks.

The exemplary embodiment shown in FIG. 86 also includes at least onemonitoring facility schematically indicated 514. The monitoring facilityof the exemplary embodiment is used to monitor the conditions offacilities and to observe the activities of certain authorized users inways that are later discussed in detail. The monitoring facilityincludes at least one computer schematically indicated 516. The computer516 is in operative connection with at least one data storeschematically indicated 518. It should be understood that in someexemplary embodiments the monitoring facility may include a plurality ofcomputers and data stores.

The at least one computer 516 is in operative communication with the atleast one network 506 through at least one suitable interfaceschematically indicated 520. In the exemplary embodiment interface 520may be a suitable interface for connection to one or more high speedpublic or private wide area networks that are in operative communicationwith one or more of the facilities. Of course this approach is exemplaryand in other embodiments other approaches may be used.

Computer 516 is also in operative connection with a telephone interfaceschematically indicated 522. The telephone interface is in operativeconnection with at least one phone service network. As schematicallyindicated the phone service network may include connections to landlines, cell phone communications or other phone or data networks. Theexemplary embodiment also includes an interface 524. In the exemplaryembodiment interface 524 includes an interface to a system whichprovides signals which can be used for determining a location of aposition indicating device. This may be for example a GPS indicatingdevice, such as a portable phone schematically indicated 526. However,although a portable phone with GPS tracking capabilities is discussed,other embodiments may use other types of devices as position indicatingdevices. Likewise other embodiments may use different types of positionindicating features such as for example, location indicatingcapabilities based on signals received at cell towers or other suitablemethodologies for determining position. Likewise in other embodimentsother types of location indicating devices may be used including devicessuch as personal digital assistants (PDAs), laptop computers, notebookcomputers or other devices which include input and communicationcapabilities.

In the exemplary embodiment the portable phone 526 includes at least oneinput device including a keypad 528. The portable phone also includesother input devices such as a voice receiver. The portable phone alsoincludes output devices including a screen 530. The portable phone alsoincludes other output devices including a speaker. The exemplaryembodiment of the portable phone 526 may also include a camera which mayalso serve as an input device in some embodiments. It should beunderstood that these devices are exemplary, and in other embodiments,other approaches may be used.

The exemplary embodiment of the monitoring facility includes a pluralityof devices in operative connection with the at least one computer 516.Exemplary devices include user terminals 532 and 534. These userterminals may be of the type previously described or they alternativelyhave different or additional features. With reference to user terminal532 for example, the terminal includes at least one display device 536.The display 536 is operative to output visual displays to a user. Thismay include graphical outputs of the types previously described as wellas pictorial outputs that include images which are captured based on thefields of view of cameras at remote facilities in a manner laterdiscussed. User terminal 532 also includes a plurality of input devicessuch as a keyboard 538 and a mouse 540. Of course in other embodimentsadditional or different input and output devices may be provided inoperative connection with each user terminal.

The at least one computer 516 is also in operative connection with otherdevices at the monitoring facility. These include in the exemplaryembodiment, a device 542 which is operative to determine a currentlocation of a position indicating device such as a portable phone 526.The at least one computer is also in operative connection with atelephone system schematically indicated 544. In the exemplary systemtelephone system 544 is usable to provide voice communications foroperators at the monitoring facility through the telephone interface.This may be done for example using various types of suitable telephoneconnections. Alternatively voice over Internet protocol (VOIP) or othertypes of network connections may be used for voice communications. Inaddition the exemplary embodiment of the telephone system is operativeto provide data communications. This may include, for example, e-mail,text messaging or other suitable communications for communicating withremote computers and other devices. It should be understood that theexemplary configuration of the monitoring facility as described ismerely exemplary of some components that may be included at such afacility, and in other embodiments other, different or additionalcomponents may be used.

In the exemplary embodiment the at least one data store 518 includesdata pertinent to the operation of the system. Such data may includedata of the types previously described including for example, sequencesof actions to be performed when particular events or conditions occur.The data store may also include information concerning authorized usersof the system and inputs that each user may use to gain access tofeatures of the system. In addition in some embodiments the at least onedata store may include information corresponding to the facilities whichare in operative connection with the monitoring facility through the atleast one network. The data regarding the facilities may includeinformation related to the particular facility, the location thereof,items stored therein, contact data for persons or entities to benotified about conditions which may occur in the facility, and otherinformation. In the exemplary embodiment the at least one data store isalso operative to include data which associates the data correspondingto particular users with the particular facilities with which they areassociated. In this way an authorized user may be determined as oneassociated with a particular facility through operation of the at leastone computer 516. This enables the at least one computer to operate inaccordance with its programming to carry out the activities for the userrelated to the particular facility.

In still other exemplary embodiments the at least one data store mayinclude software instructions of various types that are suitable forcarrying out the functions required by the particular system. This mayinclude for example, speech recognition software which enables theinterpretation by the at least one computer of verbal commands that arereceived from a user. Examples of such software include Via Voice™ byIBM and Point and Speak™ by Dragon Software. In still other embodimentsthe at least one data store may include voice recognition software. Suchvoice recognition software may be suitable for identifying a voice asassociated with a particular user. An example of such software is VoiceVault™ by Biometric Security Ltd. Indeed in some embodiments a user'svoice may serve as a user identifying input. In still other embodimentsthe at least one data store may include facial recognition software. Thefacial recognition software may be used in some embodiments to identifyparticular authorized users of the system. Of course these are merelyexemplary of types of data which may be stored in the at least one datastore in some exemplary embodiments.

Certain embodiments of the system shown schematically in FIG. 86 may beoperated to minimize the risk of harm to a user who is required totravel to a facility. This may include for example a person who hasresponsibility for opening the bank facility 490 after it has beenclosed for the night or for an extended period of time such as over aholiday weekend. In an exemplary embodiment, operators and/or computersof the monitoring facility may review in generally real-time access, thefields of view of the plurality of cameras located at the bank facilitythrough the at least one network 506. Alternatively or in addition, thecomputer at the monitoring facility may be operative to store images andother data associated with activities that have occurred at the bankfacility. This may be done in a manner like that previously discussed.Such images and information may be accessed at the monitoring facilityfor review. Thus for example in the exemplary embodiment, the personresponsible for opening the bank facility can gain access to the systemand cause the monitoring facility to review images available from thecameras or other information or triggering events at the bank facilityto be sure that there are no abnormal conditions before and/or at thetime the user arrives. In addition in an exemplary embodiment themonitoring facility may observe the user arriving at the bank facilityand observe the user until the user is within the facility and actuatesan input device to indicate that they are safe and that there are noabnormal conditions. Of course if an abnormal condition is noted, themonitoring facility may operate to notify the user to stay away from thebank facility, and in addition may notify other appropriate entities andauthorities about the abnormal condition or take other actions.

The logic executed by the at least one computer 516 in carrying out thefunctions of an exemplary embodiment is shown schematically in FIGS. 87through 89. In an exemplary embodiment the at least one computeroperates to receive a communication from a user that there is to be someactivity. The communication in the exemplary embodiment is received froma user using a portable phone 526. The user communicates to the at leastone computer at the monitoring facility through the telephone interface522. Upon establishing a telephone connection to the monitoringfacility, the user provides at least one identifying input through thephone. This is represented in a step 546. As previously discussed theidentifying input may include for example the input of a code throughthe keypad of the portable phone. Alternatively in other embodiments theat least one user identifying input may include a particular passwordthat is spoken by the user. In still other exemplary embodiments theidentifying input may include the user's particular voice pattern whichcan be identified through operation of the at least one computer. Instill other embodiments the user may provide a visual input through thecamera on the portable phone as an identifying input. Other identifyinginputs may include for example, the user's cell phone number, itsparticular location such as being positioned at an authorized user'shouse, a fingerprint scan through a fingerprint scanner on the cellphone, or other suitable device for providing inputs that can be used toidentify the particular user as an authorized user of the system.

After receiving the at least one user identifying input, the at leastone computer operates at a step 548 to determine that the computer canidentify the at least one input provided by the user as one associatedwith an authorized user. This is done by the at least one computer basedon information in the data store. If the computer cannot identify the atleast one input as one associated with an authorized user, the computerexecutes a step 550 to determine if it has previously attempted a retryto obtain a validated input. In the exemplary embodiment four attemptsare made to obtain from the user at least one identifying input that canbe used to verify that the user is an authorized user. After threeretries a message is sent through operation of the at least one computerto the person attempting to access to system, that access is denied.This is reflected in a step 552 and the system disconnects from theportable phone at a step 554. Of course it should be understood thatalthough in the exemplary embodiment the portable phone is discussed, inother embodiments stationary phones or other types of input devices maybe used.

If in step 548 the input received is verified through operation of theat least one computer as associated with an authorized user, the atleast one computer then operates in the exemplary embodiment to resolvedata corresponding to the facility associated with the user. This isindicated at a step 556. In some embodiments the facility may beresolved based on information stored in the at least one data store. Inother embodiments the facility may be resolved based on inputs receivedfrom the user. For example in some embodiments an authorized user may beassociated with only a single facility, while in other embodiments anauthorized user may be associated with multiple facilities. As a resultin some embodiments a particular facility which would be the destinationof the user is resolved by the computer based on certain inputs providedby the user to indicate the particular destination facility in theparticular session, from the plurality of destinations that may beauthorized for that user by the system. Of course this approach ismerely exemplary.

The at least one computer is then operative in the exemplary embodimentto provide signals which indicate to the user the particular facility ordestination which the system has resolved they will be traveling to.This is represented in a step 558. The output to the user may beproduced for example through a text message on the screen or theportable phone or through a computer generated voice output to theuser's phone. Of course these approaches are exemplary.

The user then provides a further input in the exemplary embodiment toconfirm the destination that has been resolved by the at least onecomputer. This is represented in a step 560. In response to the user'sinput the computer next determines as represented in a step 562, whetherthe user has confirmed that the indicated destination is accurate. Ifthe user has indicated that the destination is not accurate, thecomputer next executes an operation as represented in step 564 todetermine if there has been previously an unsuccessful attempt toresolve the particular facility which will be the user's destination. Ifthere has been a previous attempt which was unsuccessful, the computerthen operates to end the session. If however there has not been aprevious attempt the computer operates as represented by a step 566 toagain resolve a particular facility which would be the user'sdestination. Step 566 may include for example providing further outputsto the user and receiving other inputs in an effort to determine theproper facility to which the user will be traveling.

In this exemplary embodiment once the user has confirmed the facilitywhich is the destination, the at least one computer operates to causethe output through at least one display of the monitoring facility, atleast one image that corresponds to at least one field of view of atleast one camera at the designated facility. This is represented in astep 568. In exemplary embodiments an operator at the monitoringfacility may provide inputs to input devices to review imagescorresponding to the fields of view of a plurality of cameras thatcapture images of areas within and outside the facility. This mayinclude for example in the case of the exemplary bank facility 590, theareas adjacent to the vault, the ATM, the entrance area and other areaswithin and outside the facility. In some embodiments a user at themonitoring facility may analyze the plurality of visual outputsgenerated in response to the cameras for abnormal conditions. In stillother embodiments the at least one computer may operate in the mannerpreviously discussed to analyze the images for discrepancies which maybe indicative of improper or abnormal conditions. In still otherembodiments communication with the bank facility may include computer502 sending alarm or other image data which may be indicative ofconditions and/or events that were sensed or detected within thefacility in the past, which are not currently existing. Of course theseprocesses are exemplary.

In the event that an abnormal condition is noted, the computer of theexemplary embodiment is operative to identify such condition. In thealternative, if an operator at the monitoring facility observes orsuspects improper conditions within the field of view of one or morecameras, they may also provide at least one input to at least one inputdevice to indicate an abnormal condition. This is represented in a step570 in FIG. 88. The computer then proceeds in a step 572 to determinethat the alarm or abnormal condition has been noted. If such a conditionis noted the at least one computer will operate to resolve user contactinformation such as the user's portable phone number or other manner inwhich the user can be contacted. This is represented by a step 574.

The at least one computer then operates to cause contact to be made withthe user using the user contact data. This is represented in a step 576.The user contact may include, for example, the at least one computerresolving a phone number for the user's portable phone or other usercontact information based on the prior contact and/or data stored in theat least one data store. The at least one computer may establish a voiceconnection so that a live operator at the monitoring center may speakwith the authorized user to advise them of the particular circumstances.Alternatively or in addition the at least one computer may operate tosend a simulated voice message or text message to the particular user.Of course these approaches are exemplary.

As represented in a step 578 the at least one computer operates toassure that the user is notified of the abnormal condition. This may bebased on a manual input provided by an operator in some embodiments. Inother embodiments it may be based on a user provided input indicatingthat they received the text or voice message generated responsive tooperation of the at least one computer.

In the exemplary embodiment the at least one computer also operates inaccordance with its programming and the data in the at least one datastore, to determine if another entity should be contacted concerning theabnormal condition. This is represented in a step 580. If so, the atleast one computer operates to cause a message to be sent to theresolved entity. This is represented in a step 582. This further mayinclude for example sending a message to a local police department,security company or other entity which is appropriately notified of aparticular condition. Of course it should be understood that in someembodiments step 582 may include sending messages to numerous entitiesbased on the programming of the at least one computer.

In the exemplary embodiment the at least one computer then waits for atleast one inputted message to indicate that the problem at the facilityhas been resolved. This may include for example an input by an operatorindicating that the monitoring facility has received a phone call orother contact in the from the security company or other appropriateentity has been contacted about the condition and who has determinedthat a potentially dangerous problem does not exist at the facility. Asrepresented in a step 586 once a message or other input indicating thatconditions are all clear has been received, the computer then operatesin accordance with its programming to initiate contact with the user asrepresented in a step 588. This may include for example resolving theuser contact data and achieving communication with the user. Thiscommunication may include an operator discussing the situation with theuser in some embodiments. In other embodiments it may include thecomputer sending other types of automated messages to the user. Ofcourse in some embodiments the computer may operate to send othermessages, such as messages indicating that no abnormal conditions havebeen noted at the destination facility. In the exemplary embodiment theat least one computer then operates to again perform the functionsindicated as associated with step 568. Of course this approach isexemplary.

If in step 572 it is determined that there is not abnormal conditionassociated with the facility which is the user's destination, the atleast one computer of the exemplary embodiment operates in conjunctionwith the position tracking device 542 to monitor the position of theuser. This is accomplished in the exemplary embodiment by tracking thelocation of the user's mobile phone. This is represented in a step 590.Further the exemplary embodiment operates to provide outputs through atleast one visual display at the monitoring facility indicating the thencurrent position of the user. This is represented by a step 592. As canbe appreciated, in this exemplary embodiment the at least one computeris enabled to indicate to operators at the monitoring facility the thencurrent position of the user. Thus for example an alarm condition shouldbe indicated at the facility between the time of the initial check andthe user arriving at the facility, an operator can determine that theuser has not reached the facility and the user can be advised not tocontinue their journey. Of course this approach is exemplary.

In the exemplary embodiment the at least one computer is operative totrack the location of the position indicating device being carried inproximity to the user, and determines when the user is near to thedestination facility. This is represented in a step 594. It should beunderstood that while in the exemplary embodiment discussed, thedetermination that the user is near the facility is based on tracking ofthe position indicating device, in other embodiments it may be based onother inputs. This may include for example a field of view of a selectedcamera identifying a vehicle or other features associated with theauthorized user in a particular location. It may also be basedalternatively on identifying features of the user such as the user'sface coming into a field of view of a camera at the facility. Of coursethese approaches are exemplary of many approaches that may be used.

When it is determined that the user is in proximity to the facility, theat least one computer operates in accordance with its programming toprovide at least one visual output through the at least one displaydevice at the monitoring facility. This enables observing the userarriving at the facility. This is represented in step 596. Further whenthe user arrives at the facility, the at least one computer operates toagain check for alarm conditions or other conditions that may indicatethat the user should not enter the facility. In addition an operator mayprovide inputs to view the visual images corresponding to fields of viewof a plurality of cameras and may provide inputs corresponding to anyabnormal conditions noted. The computer then determines if any abnormalconditions have been indicated as represented in step 598.

If an abnormal condition has been indicated, the computer operates at astep 600 to identify the alarm condition and to carry out the routinepreviously described to notify the user and other appropriate entities.Of course it should be understood that the particular steps executed maybe tailored to the particular conditions noted. Alternatively or inaddition with the user in proximity to the facility operators at themonitoring facility may take steps that are appropriate based on thecircumstances. This may include for example communicating through thenetwork to the facility to actuate alarms, loudspeakers, locking devicesor other devices as appropriate to indicate to the user not to enter thefacility or to avoid certain areas or activities.

In the exemplary embodiment if any abnormal conditions are noted, the atleast one computer operates to provide outputs through at least onedisplay. This may be done in accordance with one or more programmedsequences or alternatively in response to inputs from operators. Inexemplary embodiments the computer will operate to enable outputsthrough the visual displays so that the user can be observed in theentrance area of the facility and can be generally under continuousobservation until the user is safely within the facility. This isrepresented by a step 602. In the exemplary embodiment the at least onecomputer continues to operate to provide visual outputs and to monitorthe user at the facility until the user provides at least one input tothe at least one input device 504 within the facility. This isrepresented by a step 604. The receipt of the input from the userindicating that they are safely within the facility is acted upon by thecomputer as represented in step 606. The computer then operates inaccordance with its programming to end the monitoring session for theparticular user as the user has now arrived safely at the facility. Thisis represented by a step 608. Of course as can be appreciated the atleast one computer may continue to operate in accordance with itsprogramming in some embodiments to continue to monitor the facility tocheck for abnormal conditions or other circumstances that maynecessitate action. Further in exemplary embodiments, images related tothe user and the monitoring session may be stored in the at least onedata store to later recover and analyze in the manner previouslydiscussed. This may be useful in some embodiments when subsequent to themonitoring session questions or issues arise. Of course this approach isexemplary and in other embodiments other approaches may be used.

In still other embodiments it may be desirable to monitor user activityassociated with a user leaving the facility. This may be desirable forexample to assure that a person responsible for closing the facility atthe end of the business day is able to safely exit the facility, leavethe facility in their vehicle or otherwise, and begin traveling to theirdestination. In still other embodiments it may be desirable to not onlymonitor user activity leaving a facility but also to monitor theprogress of the user when traveling to another destination and determineif there are any unusual conditions or problems that are encountered inthe user's travels. In still other embodiments it may be desirable tomonitor the activity of the user arriving at the destination to be surethat they have reached the destination safely. Such a system may beuseful for example in tracking the movement of persons who may becarrying valuables such as currency, gems or other items betweenfacilities. Such a system may also be valuable for purposes ofmonitoring deliveries such as deliveries of cash or other valuable itemsto banking facilities. Such systems may also be useful in connectionwith tracking deliveries of other items.

FIGS. 90 through 93 include exemplary logic carried out throughoperation of the system schematically represented in FIG. 86 inconnection with monitoring the user's activity when leaving a currentfacility, monitoring the traveling to another destination facility, andobserving the arrival of the user at the destination facility. In thisexemplary logic flow the user first provides at least one identifyinginput at a step 610. This may be done in a manner like that previouslydiscussed or in an alternative manner. If the at least one user inputcorresponds to an authorized user as indicated in a step 612, the atleast one computer operates in accordance with its programming toprovide messages that are output to the user to seek further informationfrom the user including destination information. This is represented bya step 614. However, if in step 612 the identifying input from the useris not determined as corresponding to an authorized user, the at leastone computer operates in accordance with its programming to carry outsteps 616, 618 and/or 620. These steps are like those described inconnection with the prior embodiment and through which attempts are madeto receive user inputs corresponding to an authorized user. If the usercannot be verified as an authorized user by three repeat attempts, thenthe session is ended.

In response to the execution of step 614 by the at least one computerthe user provides inputs. In the exemplary embodiment, based on theseinputs the at least one computer resolves data corresponding to thecurrent facility at which the user is located. This is represented by astep 622. This may be based in some embodiments on the location of theposition indicating device maintained in proximity to the user such asthe cell phone. In other embodiments it may be based on the addressassociated with a telephone or an IP address associated with a computerconnection through which the user is communicating with the system. Ofcourse these approaches are exemplary.

The at least one computer is also operative to resolve the destinationfacility to which the user will travel. This is represented in a step624. The destination facility information may be resolved based oninputs from the user and/or information stored in the data store. Thecomputer then operates to provide at least one output to the user. Inthe exemplary embodiment the at least one output asks that the userconfirm the destination to which they will be traveling. This isrepresented in a step 626. The at least one computer then receives theuser input as represented in a step 628.

The computer then operates in the exemplary embodiment to determine ifthe user has confirmed that the resolved destination facility is thefacility to which the user will travel. This is represented in a step630. If a user indicates that the resolved facility is not the correctfacility, the computer next executes a step 632 to determine if therehas been a previous inability to determine the destination facility. Ifnot, the computer operates as represented in a step 634 to resolve thedestination facility information. Alternatively if the computer has beenpreviously unsuccessful in resolving the facility information, thecomputer operates to end the session.

In the exemplary embodiment if a user confirms the accuracy of theoutput destination information, the computer then operates in accordancewith its programming to cause the output through visual displays at themonitoring facility, images corresponding to a field of view of at leastone camera located at the facility at which the user is currentlylocated. This is represented in a step 636. In the exemplary embodimentthis may include an operator providing inputs to input devices thatenable the operator to scan the fields of view of a plurality ofcameras. In addition or in the alternative, the computer may operate inaccordance with programmed sequences to review the fields of view of aplurality of cameras. Alternatively or in addition the at least onecomputer may operate to determine if alarm conditions have occurred atthe facility where the user is currently located. In an exemplaryembodiment if an operator determines if there is an abnormal orsuspicious condition, they will provide at least one corresponding inputto at least one input device. The at least one computer then operates inaccordance with its programming to determine if the abnormal conditionshave been noted. This is represented in a step 638.

If an alarm or abnormal condition is noted, as represented in step 640,the exemplary computer then operates in accordance with its programmingand/or operator provided inputs as appropriate. For example in somecircumstances it may be appropriate to contact the user and advise themto remain in the facility. This is represented in a step 642.Alternatively step 642 may include an instruction to the user to leavethe facility immediately. The appropriate instructions may be based onthe particular steps that are to be executed by the computer in a givensequence depending on the particular alarm or abnormal condition.Alternatively the activity may be taken by the computer in response toinputs from an operator.

In still other circumstances it may not be appropriate to contact theuser, such as for example when observation indicates that the user isbeing robbed or abducted. In such cases the at least one computer mayoperate in accordance with a programmed sequence or operator inputs tocontact one or more third parties as represented in a step 644. The atleast one computer may also contact multiple third parties asappropriate such as the police, a security company or other persons. Theat least one computer may also operate in accordance with itsprogramming to monitor the user's current position based on the positionof the cell phone. This is represented in a step 646. The exemplarycomputer then operates in accordance with its programming to maintainand monitor as appropriate as represented in a step 648 until at leastone resolution input is received as represented in a step 650. Theresolution input generally includes in an exemplary embodiment, an inputfrom an operator indicating that the problem is closed or otherwiseresolved. Of course it should be understood that these steps areexemplary and in other embodiments other steps may be taken.

If at 640 no alarm or abnormal condition is indicated, the at least oneoperator will watch the user leave the first facility on a displaythrough the at least one visual output. Thereafter in the exemplaryembodiment the at least one computer is operative to monitor the user'slocation based on the position of the position indicating device. Thisis represented in step 652. The exemplary embodiment of the system isalso operative to provide visual outputs showing the then currentlocation of the user either on a continuous or periodic basis. Thesevisual outputs enable the operator to monitor visually the progress ofthe user relative to the destination. The visual outputs in someexemplary embodiments may include maps or other information tofacilitate visual observation of the user's progress. This isrepresented in a step 654. In alternative embodiments the at least onecomputer may access public web cameras in areas through which the userwill pass. The at least one computer may operate to cause outputs thatinclude the user or their vehicle. The computer may further operate tohighlight the user or their vehicle on the output screens based onposition signals or operator inputs. Of course these approaches areexemplary.

The at least one computer is also operative to monitor the location ofthe user based on the position indicating device to determine if theuser's movement or lack thereof is consistent with the user continuingto progress toward the destination facility. As can be appreciated, inthe event that the user is determined to be taking a path that is notmoving towards the destination facility or the user ceases to makeprogress, this may be indicative of a problem. This may include avehicle malfunction or more serious issues such as foul play. Theanalysis of the movement of the position indicating device isrepresented in a step 656.

If the user's movement is consistent with travel to the destinationfacility, this is determined in a step represented 658. The computeralso considers whether the user has reached a position in proximity tothe destination facility. This is represented by a step 660. If the useris not in proximity to the destination facility, and the movement isappropriate, the computer continues to monitor the user's progress.

If for some reason the progress of the user towards the destinationfacility is not within normal parameters, the exemplary computeroperates in accordance with its programming to resolve contact data tocontact the user. This is represented in a step 662. The at least onecomputer is operative to communicate to the user. The communication ofthe exemplary embodiment may take the form of a query message asking theuser to indicate if there are any problems or difficulties. The querymessage may take the form of an electronic message or alternatively maybe a message provided in whole or in part by a human operator based onthe circumstances. This is represented in a step 664. The computer thenoperates in accordance with its programming to receive a response fromthe user to the query message. This is represented in a step 666. Aspreviously discussed this may be a verbal response received through anelectronic system and input through the portable phone or other deviceor other input. The response may also be input by an operator who hascommunicated with the user by telephone in some embodiments. Of coursethese approaches are exemplary.

In response to receiving a response message from the user as representedin a step 668, the at least one computer of the exemplary embodiment isprogrammed to prompt the user to indicate whether they wish to continuethe monitoring session or whether the session should be discontinued.This is represented in a step 670. The user provides a response asindicated in a step 672. If the user does not wish to discontinue themonitoring session the computer then operates in accordance with itsprogramming to continue to monitor the user. This is represented in astep 674. Alternatively if the user indicates that the monitoringsession is to end, the computer operates to discontinue monitoring theactivity of the user as represented in a step 676. Of course in someembodiments a secret code or other verification input may be required tobe input by the user to end the monitoring session. This may help toassure that the session is not ended by an unauthorized person.

Alternatively if in step 668 the user fails to respond to the querymessage within a given time, or the response indicates that there may bea problem, the at least one computer operates in accordance with itsprogramming to carry out notification procedures to protect theinterests of the user. This may include for example taking the stepspreviously discussed in resolving third parties to contact such as thepolice or security service, monitoring the position of the user andtaking other appropriate actions as directed by an operator. Of coursethese approaches are exemplary and other approaches may be used, basedon the particular circumstances.

If in step 660 it is determined that the user is in proximity to thedestination, the at least one computer operates to cause the output ofvisual images at the monitoring facility corresponding to at least onefield of view of at least one camera at the destination facility. Thisis represented by a step 678. The at least one computer also operates inaccordance with its programming to determine if there are any alarm orabnormal conditions or other potential problems at the destinationfacility that suggest that a user should not complete the journey to thefacility. In addition an operator reviewing outputs may provide inputsthrough input devices indicating abnormal conditions. The at least onecomputer operates as represented in step 680 to determine if suchconditions exist. If as represented in step 682 a problematic conditionis noted, the at least one computer operates in accordance with itsprogramming to take appropriate steps.

In the exemplary embodiment the at least one computer, in response to aproblem such as an alarm or abnormal condition at the destinationfacility, resolves the user contact data as represented in a step 684and operates to cause contact to be made with the user as represented instep 686. The computer then determines if the user has acknowledged themessage as represented in a step 688. As previously discussed in someembodiments acknowledgment by a user may be based on an input providedby the user or an input provided by an operator at the facility who hascontacted the user.

In addition the at least one computer may operate to resolve third partycontact data as appropriate for the condition which is represented in astep 690. The computer may then operate to contact one or moreappropriate entities who are indicated based on data stored in the datastore as the appropriate entities to contact in the given circumstances.This is represented by a step 692. The computer then operates tomaintain a monitoring function waiting for an indication that theproblem has been resolved. This is represented in a step 694. Theexemplary computer then determines if it has received a messageindicating if it has received a message indicating that the situationhas been resolved in a step 696. If no such message has been receivedthe computer continues to operate to monitor. If such a message has beenreceived the at least one computer then operates in accordance with itsprogramming to contact the user as represented in a step 698. Thecomputer then operates to continue the monitoring function to monitorthe user as they reach the destination facility. Of course it should beunderstood that in exemplary embodiments operators at the monitoringfacility may provide inputs to override and change the sequence ofactivities carried out by the computer as is appropriate under thecircumstances.

If in step 682 it is determined that no problems are evident at thedestination facility, the at least one computer then operates to causevisual outputs through display devices corresponding to one or morefields of view of cameras at the destination facility. This enables theoperator to observe the user entering the facility to assure that theyhave arrived safely. This is represented in a step 700. The exemplarycomputer then continues to monitor for an input from the user indicatingthat they are safely within the facility. This is represented in a step702. Upon receipt from the user of at least one signal corresponding tothe user input indicating that the user has safely arrived at thedestination facility, the computer ceases monitoring. This isrepresented in a step 704. The computer then operates to ceasemonitoring and end the session in a step 706.

It should be understood that in various embodiments different types ofinputs from a user who has arrived at a destination facility may beprovided. These may include inputs from an input device at the facilityof the type previously discussed. Alternatively the user may provideinputs to a portable phone, portable computer or other input device asis appropriate to indicate their safe arrival.

As can be appreciated the exemplary system may be used to monitor useractivity and to minimize the risk of harm to users who are responsiblefor opening, closing and traveling between facilities. Of course theapproaches described are exemplary of many approaches that may be used.

Thus embodiments may achieve at least one of the above statedobjectives, eliminate difficulties encountered in the use of priordevices and systems, solve problems and attain the desirable resultsdescribed herein.

In the foregoing description certain terms have been used for brevity,clarity and understanding, however no unnecessary limitations are to beimplied therefrom because such terms are used for descriptive purposesand are intended to be broadly construed. Moreover, the descriptions andillustrations herein are by way of examples and the invention is notlimited to the exact details shown and described.

In the following claims any feature described as a means for performinga function shall be construed as encompassing any means known to thoseskilled in the art as being capable of performing the recited functionand shall not be deemed limited to the particular means shown in theforegoing description or mere equivalents thereof. The provision of anAbstract herewith shall not be construed as limiting the claims tofeatures discussed in the Abstract.

Having described the features, discoveries and principles of theinvention, the manner in which it is constructed and operated, and theadvantages and useful results attained; the new and useful structures,devices, elements, arrangements, parts, combinations, systems,equipment, operations, methods, processes and relationships are setforth in the appended claims.

1. A method comprising: (a) operating at least one processor to cause amonitoring facility to receive responsive at least in part to at leastone input provided through at least one input device by a remotelylocated person, identifying data, and data corresponding to adestination; (b) operating the at least one processor to determineresponsive at least in part to data stored in at least one data store,that the identifying data corresponds to an authorized user; (c)operating the at least one processor to cause the monitoring facility toreceive location data corresponding to locations of a locationindicating device maintainable in proximity to the user as the usermoves; (d) operating the at least one processor responsive at least inpart to the location data, to cause outputs to be provided through atleast one visual display at the monitoring facility, wherein the outputsinclude at least one visual indication corresponding to the locations;(e) determining that movement of the location indicating device is notconsistent with the user moving toward the destination; and (f)operating the at least one processor to cause responsive at least inpart to the determination in (e) and data stored in the at least onedata store, at least one action.
 2. The method according to claim 1wherein in (f) the at least one action includes sending a query messageto the user, and monitoring for a response to the query message from theuser for a time period.
 3. The method according to claim 2 and furthercomprising: (g) responsive at least in part to not receiving a responseto the query message within the time period, sending a notificationmessage to an entity other than the user, wherein the entity isdetermined through operation of the at least one processor responsive atleast in part to data stored in the at least one data store.
 4. Themethod according to claim 1 wherein (f) includes sending a notificationmessage to an entity other than the user responsive at least in part todata stored in the at least one data store.
 5. The method according toclaim 1 and further comprising: (g) determining that the user iscurrently located at a first facility remote from the monitoringfacility, wherein the first facility includes at least one first camera,wherein the at least one first camera is in operative connection withthe monitoring facility; (h) responsive at least in part to thedetermination in (g), operating the at least one processor to cause atleast one output through the at least one visual display that shows theuser at the first facility.
 6. The method according to claim 5 whereinin (h) the at least one output through the at least one visual displayincludes a visual image of the user leaving the first facility.
 7. Themethod according to claim 6 wherein the at least one processor isoperative to determine a destination as being a second facility remotefrom the monitoring facility, and further comprising: (i) determiningthat the user is in proximity to the second facility, wherein the secondfacility includes at least one camera in operative connection with themonitoring facility; (j) responsive at least in part to (i), operatingthe at least one processor to cause at least one output through at leastone visual display that shows a visual image of the user at the secondfacility.
 8. The method according to claim 7 wherein in (j) the at leastone output includes a visual image of the user arriving at the secondfacility.
 9. The method according to claim 1 wherein in (a) the at leastone input device includes a portable phone, and wherein the portablephone includes the location indicating device.
 10. The method accordingto claim 9 and further comprising: (g) subsequent to (d), operating theat least one processor to cease causing outputs to be provided throughthe at least one visual display, responsive at least in part to at leastone further input provided by the user through the portable phone. 11.The method according to claim 1 wherein in (e) the destination comprisesa bank facility, wherein the bank facility includes an entrance area,and further comprising (g) operating the at least one processor to causethe at least one visual display to provide at least one visual outputthat shows the user in the entrance area.
 12. The method according toclaim 1 wherein in (e) the destination comprises a bank facility,wherein the bank facility includes an automated banking machine and avault, and wherein the bank facility includes at least one camera,wherein the at least one camera has a field of view that includes anarea adjacent at least one of the automated banking machine and thevault, and further comprising (g) operating the at least one processorto cause the at least one visual display to provide at least one visualoutput that shows the user in an area adjacent at least one of theautomated banking machine and the vault.
 13. The method according toclaim 1 wherein the destination comprises a building facility, andfurther comprising: (g) subsequent to (d), operating the at least oneprocessor to cease causing outputs to be provided through the at leastone visual display, responsive at least in part to at least one furtherinput provided by the user through at least one facility input device atthe building facility.
 14. The method according to claim 1 wherein in(e) the determining is responsive at least in part to the at least onevisual indication.
 15. A method comprising: (a) operating at least oneprocessor to cause a monitoring facility to receive responsive at leastin part to at least one input provided through at least one input deviceby a remotely located person, identifying data, and data correspondingto a destination; (b) operating the at least one processor to determineresponsive at least in part to data stored in at least one data store,that the identifying data corresponds to an authorized user; (c)operating the at least one processor to cause the monitoring facility toreceive location data corresponding to locations of a locationindicating device maintainable in proximity to the user as the usermoves; (d) operating the at least one processor responsive at least inpart to the location data, to cause outputs to be provided through atleast one visual display at the monitoring facility, wherein the outputsinclude at least one visual indication corresponding to the locations;(e) determining that the location indicating device is located adjacenta building facility, wherein the building facility includes at least onecamera in operative connection with the monitoring facility; and (f)responsive at least in part to the determination in (e), operating theat least one processor to cause at least one visual output to beprovided through the at least one visual display of the user at thebuilding facility.
 16. The method according to claim 15 wherein the atleast one camera has a field of view inside the building facility and afield of view outside the building facility, wherein (f) includesproviding at least one visual output including an image of the userinside the building facility and at least one visual output including animage of the user outside the building facility.
 17. The methodaccording to claim 15 and further comprising: (g) subsequent to (d),operating the at least one processor to cease causing outputs to beprovided through the at least one visual display responsive at least inpart to at least one further input provided by the user through at leastone facility input device at the building facility.
 18. The methodaccording to claim 15 wherein in (a) the at least one input deviceincludes a portable phone, and wherein the portable phone includes thelocation indicating device, and further comprising: (g) subsequent to(d), operating the at least one processor to cease causing outputs to beprovided through the at least one visual display, responsive at least inpart to at least one further input provided by the user through theportable phone.
 19. The method according to claim 15 wherein in (e) thedetermining is responsive at least in part to the at least one visualindication.
 20. A method comprising: (a) obtaining information at amonitoring facility associated with a monitoring service, responsive atleast in part to at least one input provided to a mobile phone by aperson, wherein the information includes identifying data, and datacorresponding to a destination; (b) determining that the identifyingdata corresponds to an authorized user of the monitoring service; (c)receiving in real time at the monitoring facility, location datacorresponding to different locations of the mobile phone during movementof the mobile phone; (d) displaying at the monitoring facilityresponsive at least in part to the location data received in (c), visualindications corresponding to the different locations, wherein currentlocation of the authorized user is determinable based at least in parton current location of the mobile phone; (e) determining responsive atleast in part to the visual indications displayed, if movement of themobile phone is consistent with travel toward the destination; and (f)responsive at least in part to the determination in (e), causing atleast one action, wherein responsive at least in part to a negativedetermination in (e), the at least one action includes sending at leastone message to the mobile phone, wherein responsive at least in part toa positive determination in (e), the at least one action includesdetermining if further movement of the mobile phone is consistent withtravel toward the destination.
 21. The method according to claim 20wherein the monitoring service comprises a delivery monitoring service,wherein (e) includes determining whether travel movement of a courier isconsistent with travel movement toward a particular deliverydestination.